Abstract:Public key infrastructure (PKI) plays a fundamental role in securing the infrastructure of the Internet through the certification of public keys used in asymmetric encryption. It is an industry standard used by both public and private entities that costs a lot of resources to maintain and secure. On the other hand, identity-based cryptography removes the need for certificates, which in turn lowers the cost. In this work, we present a practical implementation of a hybrid PKI that can issue new identity-based cryptographic keys for authentication purposes while bootstrapping trust with existing certificate authorities. We provide a set of utilities to generate and use such keys within the context of an identity-based environment as well as an external environment (i.e., without root trust to the private key generator). Key revocation is solved through our custom naming design which currently supports a few scenarios (e.g., expire by date, expire by year and valid for year). Our implementation offers a high degree of interoperability by incorporating X.509 standards into identity-based cryptography (IBC) compared to existing works on hybrid PKI–IBC systems. The utilities provided are minimalist and can be integrated with existing tools such as the Enterprise Java Bean Certified Authority (EJBCA).

Public Key Infrastructure: Managing the E-Business Security

Inter-domain authentication scheme for Pervasive Computing Environments

A PKI-Based Authentication Approach for E-Business Systems

Conformation and Application of Dynamic Public Key Infrastructure

Windows 2000 Public Key Infrastructure and Electronic Commerce

The balance between security and performance in electronic business

PKI:Fundamental of Secure Electronic Commerce

Towards a Scalable PKI for Electronic Commerce Systems.

Security Middleware for Enhancing Interoperability of Public Key Infrastructure

Security of E-Government: Extensive Implementation of PKI is the Key

An Implementation Suite for a Hybrid Public Key Infrastructure

Securing Key Issuing in Peer-to-peer Networks.

IOT Secure Transmission Based on Integration of IBE and PKI/CA

Failures of public key infrastructure: 53 year survey

Decentralized Public Key Infrastructures Atop Blockchain.

A distributed key generation technique for public key infrastructures

PKI Technology for Data Encryption

Security Architecture on the Trusting Internet of Things

Effect of Ga$^{+}$ irradiation on magnetic and magnetotransport properties in (Ga,Mn)As epilayers

WebIBC: Identity Based Cryptography for Client Side Security in Web Applications

Security Architecture for Electronic Commerce