PKI trust relationships: from a hybrid architecture to a hierarchical model

Satizábal, Cristina; Páez, Rafael; Forné, Jordi

doi:10.1109/ares.2006.93

Cited by 11 publications

(6 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…This configuration, [5] all users trust the same root CA (RCA) i.e. all the users of a hierarchical PKI begin their certification paths with the RCA's public key.…”

Section: B Hierarchical Modelmentioning

confidence: 99%

“…Compromise of the entire PKI is due to compromise of RCA's private key. Trust relationship and path discovery is difficult to achieve across companies or geographical boundaries due to top down approach, since user has to trust the root CA which has multiple path to reach the RCA due to vulnerable attack [1].If the user does not trust the root CA, then it should use upward approach through the 3 hierarchy for a trusted CA that has certified the public key of the CA in question [5].…”

Section: B Hierarchical Modelmentioning

confidence: 99%

“…It is also known as mesh or cross-certificate architecture. Here, the user's trust anchor is its local CA and all the CAs can be trust points because they are autonomous [5]. Autonomy refers to the CA which is not a superior CA in a hierarchy.…”

Section: Peer-to-peer Modelmentioning

confidence: 99%

“…In addition, validation of long paths can be difficult, especially when storage and processing capacities of the verifier are limited. PKI supports data integrity, confidentiality, strong authentication and non repudiation, wherein any users of a particular domain who is responsible cannot deny the charges [5]. Trusted Third Parties (TTP's) are used in case of PKI called as Certification Authorities (CAs) to digitally sign the certificates called Public Key Certificates (PKCs), describing that particular public key belongs to a particular Users.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Certificate Path Discovery by Constructing VirtualHierarchy to Administer Trust Relationship using Peer toPeer PKI in MANETs

Nayak¹,

Ramakrishna²

2012

IJIEE

View full text Add to dashboard Cite

“…This configuration, [5] all users trust the same root CA (RCA) i.e. all the users of a hierarchical PKI begin their certification paths with the RCA's public key.…”

Section: B Hierarchical Modelmentioning

confidence: 99%

Section: B Hierarchical Modelmentioning

confidence: 99%

Section: Peer-to-peer Modelmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Certificate Path Discovery by Constructing VirtualHierarchy to Administer Trust Relationship using Peer toPeer PKI in MANETs

Nayak¹,

Ramakrishna²

2012

IJIEE

View full text Add to dashboard Cite

“…Many different algorithms and protocols have been defined to establish trust between two interacting parties. The establishment of trust using a public key infrastructure is widely used in many applications [3]. However, this approach is not reliable in the Internet environment because it is vulnerable to attacks from malicious software [4].…”

Section: Introductionmentioning

confidence: 99%

Trust Extension Device: Providing Mobility and Portability of Trust in Cooperative Information Systems

Nepal

Zic

Hwang

et al.

On the Move to Meaningful Internet Systems 2007: CoopIS, DOA, ODBASE, GADA, and IS

View full text Add to dashboard Cite

One method for establishing a trust relationship between a server and its clients in a co-operative information system is to use a digital certificate. The use of digital certificates bound to a particular machine works well under the assumption that the underlying computing and networking infrastructure is managed by a single enterprise. Furthermore, managed infrastructures are assumed to have a controlled operational environment, including execution of a standard set of applications and operating system. These assumptions are also valid for recent proposals on establishing trust using hardware-supported systems based on a Trusted Computing Module (TPM) cryptographic microcontroller. However, these assumptions do not hold in today's cooperative information systems. Clients are mobile and work using network connections that go beyond the administrative boundaries of the enterprise. In this paper, we propose a novel technology, called Trust Extension Device (TED), which enables mobility and portability of trust in cooperative information systems that works in a heterogeneous environment. The paper provides an overview of the technology by describing its design, a conceptual implementation and its use in an application scenario.

show abstract