Smart contract assisted blockchain based public key infrastructure system

Abstract

Public key infrastructure (PKI) is a reliable solution for Internet communication. PKI finds applications in secure email, virtual private network (VPN), e‐commerce, e‐governance, and so on. It provides a secure mechanism to authenticate users and communications. The conventional PKI system is centralized, which exposes the infrastructure to many security issues. The digital certificate generation and validation processes in PKI suffer from high latency and inadequate authentication processes. Moreover, it needs enormous time and effort to mitigate the malfeasance of the certificate authority (CA). The complexity of employing the traditional key and certificate management increases by enforcing the centralized CA$$ CA $$, which can compromise the transaction security. To overcome the aforementioned issues of PKI, three different solutions have been reported in the literature: Log based PKI (LBPKI), Web of Trust (WoT), and blockchain based PKI. The blockchain based PKI achieves more attention as it is the combination of LBPKI and WoT, which serves distributed trust, log of transactions, and constant sized data to verify the identity of users. Motivated by these facts, this article reports a blockchain‐based PKI system which has a lighter smart contract and less storage capacity and is also suitable for lightweight applications. The lighter smart contract in our infrastructure uses a threshold0.3emvalue$$ threshold\kern0.3em value $$, which validates the limit of one participating node for becoming the CA$$ CA $$ of any transaction inside the network. This approach can prevent distributed denial of service (DDoS) attacks. This smart contract also checks the signer node address. The proposed smart contract can prevent seven cyber attacks, such as Denial of Service (DoS), Man in the Middle Attack (MITM), Distributed Denial of Service (DDoS), 51%, Injection attacks, Routing Attack, and Eclipse attack. The Delegated Proof of Stake (DPoS) consensus algorithm used in this model reduces the number of validators for each transaction which makes it suitable for lightweight applications. The timing complexity of key/certificate validation and signature/certificate revocation processes do not depend on the number of transactions. The comparisons of various timing parameters with existing solutions show that the proposed PKI is competitively better.

SybilPSIoT: Preventing Sybil attacks in signed social internet of things based on web of trust and smart contract

“…A more accurate term for the original web of trust might be a decentralized key validation system. Each entity in the web of trust (WoT) received acknowledgement from another entity [14,15]. Thus, in the IoT environment, at any given moment, a graph is created with things as vertices and acknowledgements (positive or negative) as its edges.…”

Blockchain based Multi-signature Smart Contract Electronic Seal Orienting Mobile IoT Terminals

“…Although this mechanism greatly reduces counterparty risk and expands the application scenarios of contracts, it gives these large companies significant contractual control. Smart contracts [26,27] themselves are also a digital protocol, but they are software that cannot be tampered with on the blockchain and are strictly executed according to agreed terms. After receiving data, the smart contract will automatically execute.…”

AgriBlock: A Blockchain based Framework for Agricultural Supply Chain Management

“…Cryptocurrencies provide a novel and secure method of online payment that eliminates the need for centralized institutions like banks and credit card firms. There is a rising tide of interest in bitcoin at the moment [1]. ''Blockchain'' refers to the decentralized ledger that keeps track of cryptocurrency transactions.…”