Efficient Certificate Revocation List Organization and Distribution

Haas, J. H. De; Hu, Yih-Chun; Laberteaux, Kenneth P.

doi:10.1109/jsac.2011.110309

Cited by 96 publications

(77 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Failure to receive a heartbeat message (or a series of messages so as to allow possible limited connectivity) can act as indication for potential misbehaviour that can also trigger revocation by the TC. In order to improve the safety level provided, this mechanism can make use of the types of heartbeat messages already provided for monitoring the status of one-hop vehicular topologies so as to produce indistinguishable communications and diminish the revocation vulnerability window existing in conventional CRLs [11].…”

Section: B Security Analysismentioning

confidence: 99%

“…In this case, information about the revocation of a vehicle's longterm credentials, is disseminated to other participants through Certificate Revocation Lists (CRLs) or other means. Besides being computationally intensive (i.e., the use of CRLs also assumes enhanced connectivity so that all vehicles can periodically retrieve any updated lists [11]), this is harmful to the protection of their privacy [12].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Privacy-enhanced capabilities for VANETs using direct anonymous attestation

Whitefield

Chen

Giannetsos

et al. 2017

2017 IEEE Vehicular Networking Conference (VNC)

View full text Add to dashboard Cite

Abstract-In this paper, we propose a novel secure and privacypreserving solution for V2X systems leveraging widely accepted trusted computing technologies. Our approach systematically addresses all key aspects, i.e., security, privacy and accountability (revocation). By reflecting on state-of-the-art pseudonym architectures, we identify their limitations focusing on pseudonym reusage policies and revocation mechanisms. We propose the use of Direct Anonymous Attestation (DAA) algorithms to enhance existing V2X security architectures. The novelty of our proposed solution is its decentralized approach in shifting trust from the infrastructure to vehicles. Applying DAA in V2X enables enhanced privacy protection than is possible in current architectures through user-controlled linkability. The paper presents the incorporation of DAA algorithms within V2X together with rigorous security and privacy arguments.

show abstract

Section: B Security Analysismentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Privacy-enhanced capabilities for VANETs using direct anonymous attestation

Whitefield

Chen

Giannetsos

et al. 2017

2017 IEEE Vehicular Networking Conference (VNC)

View full text Add to dashboard Cite

show abstract

“…if a vehicle is revoked then all the PNs or public and private key pairs assigned to that vehicle have to be revoked [3], [4] and added to a Revocation List (RL). Therefore, if a single vehicle is revoked then there might be several thousand entries added to the list [13]. This growing RL can cause serious problems at the RSU when verifying hundreds or thousands of messages every 300 ms (as dictated by VSC [10]).…”

Section: Related Workmentioning

confidence: 99%

Data-centric Rogue Node Detection in VANETs

Zaidi

Milojevic

Rakocevic

et al. 2014

2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications

View full text Add to dashboard Cite

Abstract-Vehicular ad hoc networks (VANETs) are the future of vehicular technology and Traffic Information Systems. In VANETs vehicles communicate by different types of beacon messages to inform each other of their position and speed to give them a sense of traffic around them. Vehicles can also send emergency messages in case of accidents or other hazards. The very fast moving nodes have to act quickly based on these emergency messages. However, a rogue node which sends false emergency messages can wreak havoc in the network that may even result in fatalities. This paper develops and simulates a technique to detect a rogue node that is sending false emergency messages in VANETs by cooperative exchange of data without the need of any infrastructure or revocation list. Also, the proposed mechanism will make VANETs fault tolerant and resilient against injection of false data.

show abstract

“…Moreover, each vehicle in the network will own many temporary certificates (also called pseudonyms) to protect the users' privacy. Consequently, these lists will require hundreds of Megabytes [12,21,35]. However, distributing and updating CRLs to all vehicles raises a challenge.…”

Section: Introductionmentioning

confidence: 99%

“…They divided the CRL into several self-verifiable parts and strongly reduced its size by using Bloom filters. Authors in [12] also propose the use of Bloom filters to store the revoked certificates for increasing the search speed in the CRL. On the other hand, authors in [22] proposed to use regional CAs and short lived certificates to decrease the number of entries in the CRL.…”

Section: Introductionmentioning

confidence: 99%

BECSI: Bandwidth Efficient Certificate Status Information Distribution Mechanism for VANETs

Gañán

Muñoz

Esparza

et al. 2013

Mobile Information Systems

View full text Add to dashboard Cite

Abstract. Certificate revocation is a challenging task, especially in mobile network environments such as vehicular ad Hoc networks (VANETs). According to the IEEE 1609.2 security standard for VANETs, public key infrastructure (PKI) will provide this functionality by means of certificate revocation lists (CRLs). When a certificate authority (CA) needs to revoke a certificate, it globally distributes CRLs. Transmitting these lists pose a problem as they require high update frequencies and a lot of bandwidth. In this article, we propose BECSI, a Bandwidth Efficient Certificate Status Information mechanism to efficiently distribute certificate status information (CSI) in VANETs. By means of Merkle hash trees (MHT), BECSI allows to retrieve authenticated CSI not only from the infrastructure but also from vehicles acting as mobile repositories. Since these MHTs are significantly smaller than the CRLs, BECSI reduces the load on the CSI repositories and improves the response time for the vehicles. Additionally, BECSI improves the freshness of the CSI by combining the use of delta-CRLs with MHTs. Thus, vehicles that have cached the most current CRL can download delta-CRLs to have a complete list of revoked certificates. Once a vehicle has the whole list of revoked certificates, it can act as mobile repository.

show abstract

Efficient Certificate Revocation List Organization and Distribution

Cited by 96 publications

References 10 publications

Privacy-enhanced capabilities for VANETs using direct anonymous attestation

Privacy-enhanced capabilities for VANETs using direct anonymous attestation

Data-centric Rogue Node Detection in VANETs

BECSI: Bandwidth Efficient Certificate Status Information Distribution Mechanism for VANETs

Contact Info

Product

Resources

About