ScalaCert: Scalability-Oriented PKI with Redactable Consortium Blockchain Enabled "On-Cert" Certificate Revocation

Luo, Xinyu; Xu, Zhuo; Xue, Kaiping; Jiang, Qiantong; Li, Ruidong; Wei, Dennis

doi:10.1109/icdcs54860.2022.00121

Cited by 8 publications

(2 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, ongoing development and research are addressing these scalability issues. Initiatives like ScalaCert [47] aim to improve scalability by integrating revocation data into certificates, eliminating the need for additional storage for CRLs. The Lightweight Scalable Blockchain (LSB) [48] employs a Distributed Time-based Consensus (DTC) algorithm for a faster mining process and features a distributed throughput system for adaptive scaling.…”

Section: Scalability Evaluationmentioning

confidence: 99%

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

Halder,

Das Roy,

Shin

2024

JCP

View full text Add to dashboard Cite

Internet applications rely on Secure Socket Layer (SSL)/Transport Security Layer (TSL) certifications to establish secure communication. However, the centralized nature of certificate authorities (CAs) poses a risk, as malicious third parties could exploit the CA to issue fake certificates to malicious web servers, potentially compromising the privacy and integrity of user data. In this paper, we demonstrate how the utilization of decentralized certificate verification with blockchain technology can effectively address and mitigate such attacks. We present a decentralized public key infrastructure (PKI) based on a distributed trust model, e.g., Web of Trust (WoT) and blockchain technologies, to overcome vulnerabilities like single points of failure and to prevent tampering with existing certificates. In addition, our infrastructure establishes a trusted key-ring network that decouples the authentication process from CAs in order to enhance secure certificate issuance and accelerate the revocation process. Furthermore, as a proof of concept, we present the implementation of our proposed system in the Ethereum blockchain, confirming that the proposed framework meets the five identified requirements. Our experimental results demonstrate the effectiveness of our proposed system in practice, albeit with additional overhead compared to conventional PKIs.

show abstract

Section: Scalability Evaluationmentioning

confidence: 99%

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

Halder,

Das Roy,

Shin

2024

JCP

View full text Add to dashboard Cite

show abstract

“…They directly store bloom filters and revocation information in a public blockchain, and this is expensive. ScalaCert [41] proposed revocation-on-chain by employing a redactable consortium blockchain.…”

Section: Blockchain-based Pkimentioning

confidence: 99%

BRT: An Efficient and Scalable Blockchain-Based Revocation Transparency System for TLS Connections

Xing,

Wang,

et al. 2023

Sensors

View full text Add to dashboard Cite

Log-based public key infrastructure(PKI) refers to a robust class of CA-attack-resilient PKI that enhance transparency and accountability in the certificate revocation and issuance process by compelling certificate authorities (CAs) to submit revocations to publicly and verifiably accessible logs. However, log-based PKIs suffer from a reliance on centralized and consistent sources of information, rendering them susceptible to split-world attacks, and they regrettably fail to provide adequate incentives for recording or monitoring CA behavior. Blockchain-based PKIs address these limitations by enabling decentralized log audits through automated financial incentives. However, they continue to face challenges in developing a scalable revocation mechanism suited for lightweight clients. In this paper, we introduce BRT, a scalable blockchain-based system for certificate and revocation transparency. It serves to log, audit, and validate the status of certificates within the transport layer security (TLS)/secure sockets layer(SSL) PKI domain. We designed an audit-on-chain framework, coupled with an off-chain storage/computation system, to enhance the efficiency of BRT when operating in a blockchain environment. By implementing a blockchain-based prototype, we demonstrate that BRT achieves storage-efficient log recording with a peak compression rate reaching 8%, cost-effective log updates for large-scale certificates, and near-instantaneous revocation checks for users.

show abstract

Decentralized Electronic Health Records Management via Redactable Blockchain and Revocable IPFS

Guo,

Li,

Meese

et al. 2024

2024 IEEE/ACM Conference on Connected Health: Applications, Systems and Engineering Technologies (CHASE)

View full text Add to dashboard Cite

ScalaCert: Scalability-Oriented PKI with Redactable Consortium Blockchain Enabled "On-Cert" Certificate Revocation

Cited by 8 publications

References 23 publications

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

BRT: An Efficient and Scalable Blockchain-Based Revocation Transparency System for TLS Connections

Decentralized Electronic Health Records Management via Redactable Blockchain and Revocable IPFS

Contact Info

Product

Resources

About