Geographic server distribution model for key revocation

Abstract

Key management is one of the important issues in ensuring the security of network services. The aim of key management is to ensure availability of the keys at both the receiver's and the sender's ends. Key management involves two aspects: key distribution and key revocation. Key distribution involves the distribution of keys to various nodes with secrecy to provide authenticity and privacy. Key revocation involves securely and efficiently managing the information about the keys which have been compromised. This paper presents the geographic server distributed model for key revocation which concerns about the security and performance of the system. The concept presented in this paper is more reliable, faster and scalable than the existing Public Key Infrastructure (PKI) framework in various countries, as it provides optimization of key authentication in a network. It proposes auto-seeking of a geographically distributed certifying authority's key revocation server, which holds the revocation lists by the client, based on the best service availability. The network is divided itself into the strongest availability zones (SAZ), which automatically allows the new receiver to update the address of the authentication server and replace the old address with the new address of the SAZ, in case it moves to another location in the zone, or in case the server becomes unavailable in the same zone. In this way, it reduces the time to gain information about the revocation list and ensures availability and, thus, improvement of the system as a whole. Hence, the proposed system results in scalable, reliable and faster PKI infrastructure and will be attractive for the users who frequently change their location in the network. Our scheme eases out the revocation mechanism and enables key revocation in the legacy systems. It discusses the architecture as well as the performance of our scheme as compared to the existing scheme. However, our scheme does not call for the entire change in PKI, but is compatible with the existing scheme. Our simulations show that the proposed scheme is better for key revocation.

Efficient detection of public key infrastructure‐based revoked keys in mobile ad hoc networks

“…The scheme of geographical server distribution model for key revocation 45 presents a concept which is more reliable, faster, and scalable than the existing PKI framework in various countries, as it provides optimization of key authentication in a network. It proposes auto‐seeking of a geographically distributed certifying authority's key revocation server, which holds the revocation lists by the client, based on the best service availability.…”

“…In this paper, we have attempted to address almost all those issues for a MANET in PKI, the equivalent issues of which 45, 47 has been stated for a wired network. However, the scheme stated in Reference 45, 47 has to be entirely revamped and redone for MANETs as the behavior and characteristics of wired networks and MANETs are different and thus, those scheme and protocols designed for wired networks cannot be used effectively for MANET.…”

“…In this paper, we have attempted to address almost all those issues for a MANET in PKI, the equivalent issues of which 45, 47 has been stated for a wired network. However, the scheme stated in Reference 45, 47 has to be entirely revamped and redone for MANETs as the behavior and characteristics of wired networks and MANETs are different and thus, those scheme and protocols designed for wired networks cannot be used effectively for MANET. The major differences are listed below: In Reference 45, 47, the authors described a SAZ with multiple Certifying Authority's Key Revocation Server (CAKRS), which is not possible in MANET as each MAKeRS will form its own ZoNA and it is not possible to have more than one MAKeRS in a single ZoNA. In a wired network, we are more concerned about communication delays, message broadcast, and bandwidth consumption, but in MANET, along with communication delay, we are also concerned about the communication overheads and the power consumption. In general, CAKRS is considered to be static in Reference 45, 47 and the other nodes may change places, but in this proposed paper, MAKeRS and the nodes are mobile. In Reference 45, 47 any CAKRS could communicate with the CA server for CRL updating, but in this work, MAKeRS has to update its CRL through the Sink MAKeRS which is the only node connected to the Internet. In Reference 45, 47 the routers were present for packet forwarding and advertising the information of CAKRS(es) as a new option with SAZ option through the router query message (RQM).…”

A PKI Adapted Model for Secure Information Dissemination in Industrial Control and Automation 6LoWPANs

“…Several keying schemes have been proposed by researchers [9]- [11] but our focus in this paper is on the public key infrastructure (PKI). We restrict ourselves to the PKI scenarios of countries like India and Europe [12] in which the digital signatures and private keys are allocated by a central authority and bind the user by law to his actions, making it equivalent to the real world signatures (Information Technology [IT] Act, 2000 of India) [13]. In such a scenario, the sensor nodes being deployed in a network would have their own public-private key pair pre-allocated by the root certifying authority (RCA) and would be used by nodes to digitally sign the communication with other nodes leading to non-repudiation and integrity of information.…”

Reputation-based role assignment for role-based access control in wireless sensor networks

“…Introducing security mechanisms generally involves introducing cryptographic methods, which require high memory usage and power consumption in processing and communication. Many researchers have already proposed many security measures and most of them involve cryptographic methods and techniques [1,[3][4][5][6][7][8][9][10][11][12][35][36][37][38].…”