LOCALPKI: A User-Centric Formally Proven Alternative to PKIX

Dumas, J.; Lafourcade, Pascal; Melemedjian, Francis; Orfila, Jean-Baptiste; Thoniel, Pascal

doi:10.5220/0006461101870199

Cited by 3 publications

(3 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Certainly, this problem can be resulted by distributing the authority of CA to other institutions, in which situation that all other roles should cooperate to complete the membership service. For example, the LocalPKI [36] , decentralized anonymous credentials [37] and delegatable credentials [38] . These approaches can solve the single point problem of CA but with the cost of large calculations.…”

Section: Related Workmentioning

confidence: 99%

tsrCert: Traceable Self-Randomization Certificate and Its Application to Blockchain Supervision

Zhu,

Zheng,

Qin

et al. 2023

Tsinghua Sci. Technol.

View full text Add to dashboard Cite

Traditional public key infrastructure (PKI) only provides authentication for network communication, and the standard X.509 certificate used in this architecture reveals the user's identity. This lack of privacy protection no longer satisfies the increasing demands for personal privacy. Though an optimized anonymous PKI certificate realizes anonymity, it has the potential to be abused due to the lack of identity tracking. Therefore, maintaining a balance between user anonymity and traceability has become an increasing requirement for current PKI. This paper introduces a novel traceable self-randomization certificate authentication scheme based on PKI architecture that achieves both anonymity and traceability. We propose a traceable self-randomization certificate authentication scheme based on the short randomizable signature. Specifically, certificate users can randomize the initial certificate and public key into multiple anonymous certificates and public keys by themselves under the premise of traceability, which possesses lower computational complexity and fewer interactive operations. Users can exhibit different attributes of themselves in different scenarios, randomizing the attributes that do not necessarily need to be displayed. Through security and performance analysis, we demonstrate the suitability of the improved PKI architecture for practical applications. Additionally, we provide an application of the proposed scheme to the permissioned blockchain for supervision.

show abstract

Section: Related Workmentioning

confidence: 99%

tsrCert: Traceable Self-Randomization Certificate and Its Application to Blockchain Supervision

Zhu,

Zheng,

Qin

et al. 2023

Tsinghua Sci. Technol.

View full text Add to dashboard Cite

show abstract

“…With respect to the conference version of this paper [11], we describe a complete use case of LOCALPKI in the Internet of Things context (Section 7). We also extend the system in order to be able to interoperate multiple instances of LOCALPKI, for instance using a private blockchain (Section 4).…”

Section: Organization Of the Papermentioning

confidence: 99%

“…The full protocol, in particular the buffering mechanism (the CVL, also called public mode within LOCALPKI), is detailed next. [11,Fig. 4].…”

Section: Comparison With Pkixmentioning

confidence: 99%

LocalPKI: An Interoperable and IoT Friendly PKI

Dumas¹,

Lafourcade²,

Melemedjian³

et al. 2019

E-Business and Telecommunications

Self Cite

View full text Add to dashboard Cite

A public-key infrastructure (PKI) binds public keys to identities of entities. Usually, this binding is established through a process of registration and issuance of certificates by a certificate authority (CA) where the validation of the registration is performed by a registration authority. In this paper, we propose an alternative scheme, called LOCALPKI, where the binding is performed by a local authority and the issuance is left to the end user or to the local authority. The role of a third entity is then to register this binding and to provide up-to-date status information on this registration. The idea is that many more local actors could then take the role of a local authority, thus allowing for an easier spread of public-key certificates in the population. Moreover, LOCALPKI represents also an appropriate solution to be deployed in the Internet of Things context. Our scheme's security is formally proven with the help of Tamarin, an automatic verification tool for cryptographic protocols.

show abstract

LightCert4IoTs: Blockchain-Based Lightweight Certificates Authentication for IoT Applications

Garba

Khoury²,

Balian³

et al. 2023

IEEE Access

View full text Add to dashboard Cite

These in recent days, the proliferation of the internet of things (IoT) within the emergence of fivegeneration (5G) networks has received a huge attention in both industrial and academic domains. A 5G network is a cornerstone of realizing the full potential of the IoT, which interconnects billions of devices wirelessly. However, wireless communication in IoT devices reveals tremendous security risks in different dimensions and precisely in the distribution of the user certificates. The existing X.509 PKI, or the proposed decentralized PKI based on blockchain solutions have lacked practicality, and continue to have security flaws, or have not yet gained widespread acceptance owing to complexity and deployment issues. We present a lightweight certificate in size (LightCert4IoTs) that is not issued by Certification Authorities (CAs) due to the cost and complexity of the assignment of a signed certificate. In LightCert4IoTs first, an end-user (i.e., mobile and IoT devices) issues a selfsigned certificate and lets Local Registration Authorities (LRAs)/EDGE nodes to verify and validate the binding identity-self signed certificate of the users through the Ethereum blockchain where The Ethereum network is used as the global notary for the IoT light certificates by saving them in the blockchain immutable ledger. The LightCert4IoTs leverages the advantages of blockchain technology and smart contracts to address the existing challenges of PKI certificates in IoT devices, which neatly achieve certificate issuance, update, and revocation more securely and efficiently. Finally, the LightCert4IoTs experimental results show that LightCert, as compared to relevant solutions/baselines, achieves reasonable overheads and is suitable for use in low-constrained IoT devices where the memory and processor power are optimized.

show abstract

LOCALPKI: A User-Centric Formally Proven Alternative to PKIX

Cited by 3 publications

References 10 publications

tsrCert: Traceable Self-Randomization Certificate and Its Application to Blockchain Supervision

tsrCert: Traceable Self-Randomization Certificate and Its Application to Blockchain Supervision

LocalPKI: An Interoperable and IoT Friendly PKI

LightCert4IoTs: Blockchain-Based Lightweight Certificates Authentication for IoT Applications

Contact Info

Product

Resources

About