PKI-based trust management in inter-domain scenarios

Millán, Gabriel López; Pérez, Manuel Gil; Pérez, Gregorio Martínez; Skarmeta, Antonio F.

doi:10.1016/j.cose.2009.08.004

Cited by 31 publications

(1 citation statement)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Millán et al construct a Bridge CA (BCA) model for cross-certification in the inter-domain networking [23]. The Bridge CA builds trust with several unrelated CAs.…”

Section: Centralized Cross-domain Authentication Schemementioning

confidence: 99%

IRBA: An Identity-Based Cross-Domain Authentication Scheme for the Internet of Things

Jia

et al. 2020

Electronics

View full text Add to dashboard Cite

The incredible development of Internet of things technology promotes the integration of application systems, which enable people to enjoy the convenience of multiple application services through a single intelligent device or terminal. In order to implement value exchange and information sharing between different applications, cross-domain access is inevitable. In order to prevent illegal access, identity authentication is necessary before the terminal accesses the service. Because of the need to introduce a trusted third party, the traditional centralized authentication model not only destroys the autonomy and flexibility of the application system, but also causes issues such as single point of failure and hidden dangers of unilateral control. This paper proposes an identity-based cross-domain authentication scheme for the Internet of Things. This scheme uses the Blockchain as a decentralized trust anchor instead of the traditional certificate of authority, and uses the identity-based self-authentication algorithm to replace the traditional PKI authentication algorithm. The scheme proposed in this paper implements a decentralized authentication model, which can guarantee the autonomy and initiative of the security domain.

show abstract

“…Millán et al construct a Bridge CA (BCA) model for cross-certification in the inter-domain networking [23]. The Bridge CA builds trust with several unrelated CAs.…”

Section: Centralized Cross-domain Authentication Schemementioning

confidence: 99%

IRBA: An Identity-Based Cross-Domain Authentication Scheme for the Internet of Things

Jia

et al. 2020

Electronics

View full text Add to dashboard Cite

show abstract

A novel decentralized cross‐domain identity authentication protocol based on blockchain

Zhao

2021

Trans Emerging Tel Tech

View full text Add to dashboard Cite

In the context of cloud computing, the interaction between clients in different application domains becomes more frequent, which makes cross-domain identity authentication safely and efficiently become an important research topic. Public key infrastructure (PKI) is a technology to solve cross-domain authentication. However, there are problems such as difficulty in mutual trust between multiple certificate authority nodes (CA), failure of single point, and low efficiency in the traditional PKI method. Blockchain is a promising technology for decentralized trust management by providing consistent data storage, which gives impetus to the further development of cross-domain identity authentication. Thus, this article apply blockchain to cross-domain identity authentication. To solve the defects of the traditional PKI method, the design requirements are analyzed firstly, based on the analysis result, we proposed a double-layer cross-domain identity authentication model by constructing a consortium blockchain which is comprised of authentication server nodes (AS) and some internal blockchain, the model can highly improve the scalability of the PKI system without changing the internal architecture. Then a novel authentication protocol was put forward. The protocol can improve the efficiency of online cross-domain identity authentication transactions by verifying the hash instead of the signature of their certificate. By putting the generation process of the blockchain certificate and the storage process of its hash in the registration operation and reducing the authentication process for AS and CA, the efficiency is further improved. Finally, the protocol was evaluated by security and performance analysis. The results display our protocol can guarantee security and has an excellent performance in cross-domain identity authentication transactions.

show abstract

A virtual bridge certificate authority‐based cross‐domain authentication mechanism for distributed collaborative manufacturing systems

Zhang

Wang

Khan

2014

Security Comm Networks

View full text Add to dashboard Cite

The virtual enterprise (VE) is a new collaborative intelligent manufacturing paradigm that pools the core competencies of its member enterprises through computer networks to exploit transient market opportunities. The successful operation of such an organization is strongly dependent on its information securities, in which cross‐domain authentication among entities of different member enterprises is a crucial issue. This problem is particularly difficult in VEs because of their collaborative nature in terms of agility, market dynamics, low cost, and diversity of collaboration modes. In this paper, we put forward a novel virtual bridge certificate authority (BCA) trust model, based on which an efficient cross‐domain authentication scheme is further presented. The proposed scheme is implemented by the distributed verifiable secret sharing protocol and the threshold elliptic curve cryptosystem signature algorithm. It has the same advantages of simple construction and short length of inter‐enterprise certification paths as the BCA model but does not need to create and maintain a dedicated physical BCA. In addition, the proposed scheme has the merits of high bit security, high efficiency, low cost, conspiracy attack resistance, and adaptability to diverse collaboration modes of VE. Therefore, the scheme is suitable for cross‐domain authentications in VEs, especially for resource‐limited applications. Copyright © 2014 John Wiley & Sons, Ltd.

show abstract

PKI-based trust management in inter-domain scenarios

Cited by 31 publications

References 3 publications

IRBA: An Identity-Based Cross-Domain Authentication Scheme for the Internet of Things

IRBA: An Identity-Based Cross-Domain Authentication Scheme for the Internet of Things

A novel decentralized cross‐domain identity authentication protocol based on blockchain

A virtual bridge certificate authority‐based cross‐domain authentication mechanism for distributed collaborative manufacturing systems

Contact Info

Product

Resources

About