Efficient detection of public key infrastructure‐based revoked keys in mobile ad hoc networks

Abstract

Key revocation involves secure and efficient managing of the information about compromised keys. Spreading the information of revoked keys to the receivers of the key is a challenging task in public key infrastructure (PKI). PKI is more suitable for wired Internet infrastructure and lacks any tailor‐made protocols for extension over an ad hoc network. The paper presents a Mobile Ad hoc Key Revocation Server (MAKeRS) scheme which proposes to improve the performance and reliability of the system. Simulation shows that the concept presented in the paper is more reliable, faster, and scalable than the existing usage of PKI over Ad hoc networks. It proposes auto‐creation of zone of network availability (ZoNA) by each MAKeRS, which holds the revocation list and is the best service provider in its zone. A node automatically updates the identity of the key revocation server when it enters a new ZoNA. Each node maintains a list of identities of the key revocation servers sorted in order of their communication overhead. This list is regularly updated based on the broadcast from the servers and also gets modified based on the mobility of nodes and servers. The various scenarios of mobility of nodes and servers are considered and the scheme is designed to suit such scenarios in an optimum way. It reduces the time to gain information about the revocation list and ensures availability and, thus, improvement of the system as a whole. Hence, the proposed system results in scalable, reliable, and faster PKI infrastructure and will be attractive for the mobile Ad hoc network (MANET) users who frequently connect to the Internet for secured transactions. We discuss the architecture as well as the performance of our scheme compared to the popular existing scheme. However, our scheme does not call for the entire change in PKI, but is compatible with the existing scheme. Our simulations show that the proposed scheme is better for key revocation. Copyright © 2009 John Wiley & Sons, Ltd.

A Secure Data Dissemination in a DHT-Based Routing Paradigm for Wireless Ad Hoc Network

“…Public key algorithms are preferred in WANETs due to their effectiveness in terms of key management, confidentiality, and authentication, as shown in [17,[26][27][28][29]. For example, random predistribution of keys (RPK) [30] would not perform well in our target scenario due to the following reasons: (i) First, the random key predistribution schemes that use symmetric cryptography are found susceptible to the replication attack. In a replication attack, the attacker can add more compromised nodes in the network after acquiring some confidential information from the captured nodes.…”

“…Public key infrastructure (PKI) is used for the distribution and authentication of a public key for the public key encryption algorithm [30]. However, there are various approaches to implementing PKI in WANETs by addressing different concerns.…”

“…However, there are various approaches to implementing PKI in WANETs by addressing different concerns. A few examples are [17,23,24,[26][27][28][29][30].…”

A PKI Adapted Model for Secure Information Dissemination in Industrial Control and Automation 6LoWPANs

“…PKI is the most widely used keying infrastructure and in its traditional form, it is not considered a suitable candidate for 6LoWPAN security as the architecture has not been streamlined to suit the needs of 6LoWPAN networks. Its use is also discouraged as it creates a communication and processing overhead which rapidly depletes the resources of wireless sensor node [16]. Additionally, attacks on certification authorities have necessitated the need for efficient methods for certificate revocation and authorization, collectively referred to as certificate legislation [17].…”

Reputation-based role assignment for role-based access control in wireless sensor networks

“…Introducing security mechanisms generally involves introducing cryptographic methods, which require high memory usage and power consumption in processing and communication. Many researchers have already proposed many security measures and most of them involve cryptographic methods and techniques [1,[3][4][5][6][7][8][9][10][11][12][35][36][37][38].…”