Certificate Update Protocol in Asynchronous Networks

陈健,李芳,李悦

DOI: https://doi.org/10.3969/j.issn.1008-0570.2008.15.036

2008-01-01

Abstract:Our protocol provide a secure certificate update service based on weak network assumptions. A set of servers share the responsibility of Certificate Authority. We integrate Byzantine quorum system and proactive secret sharing to make service available and defense against denial-of-service.

What problem does this paper attempt to address?

Inter-domain authentication scheme for Pervasive Computing Environments

YAO Lin,FAN Qingna,KONG Xiangwei

DOI: https://doi.org/10.3778/j.issn.1002-8331.2011.06.023

2011-01-01

Abstract:As a result of the high mobility of the pervasive computing,the principles communicating with each other usually locate at different domains.To secure the service access and communications,the principles should authenticate each other and establish a fresh session key.A novel inter-domain authentication and key establishment protocol is proposed.The proposed protocol reduces the burden of certificates management by adopting the biometric encryption.After inter-domain mutual authentication,the two principles build a new session key using the signcryption technique.The protocol can defend lots of attacks and its correctness is proven by the SVO logic.
An Asynchronous Multi-Channel MAC Protocol for Cooperative Networks.

Yongtai Liu,Xiaoxiang Wang,Hongtao Zhang

DOI: https://doi.org/10.1109/vetecs.2011.5956118

2011-01-01

Abstract:In this paper, we propose an asynchronous multi-channel MAC (AM-MAC) protocol for cooperative network, which keeps nodes aware of all the state information and introduce cooperative transmission into asynchronous multi-channel environment. This Multi-channel MAC design adds a helper-confirm phase in channel negotiation process and also different information tables and learning methods. As we analyzed the properly designed MAC frames and handshake schemes make it perfect in data channel selection and helper confirmation. Simulations have shown that the network throughput of AM-MAC is much higher than none-cooperative multi-channel MAC protocol when causing less dropped packets.
Distributed Certification Application Via a Trusted Dealer

Liu Duan-yang,Pan Xue-zeng,Ping Ling-di

DOI: https://doi.org/10.1631/jzus.2003.0555

2003-01-01

Abstract:Distributed certification via threshold cryptography is much more secure than other ways to protect certification authority (CA)'s private key, and can tolerate some intrusions. As the original system such as ITTC, etc., is unsafe, inefficient and impracitcal in actual network environment, this paper brings up a new distributed certification scheme, which although it generates key shares concentratively, it updates key shares distributedly, and so, avoids single-point failure like ITTC. It not only enhances robustness with Feldman verification and SSL protocol, but can also change the threshold (t, k) flexibly and robustly, and so, is much more practical. In this work, the authors implement the prototype system of the new scheme and test and analyze its performance.
Hash Function and Smart Card Based Multi-Server Authentication Protocol

Qi Xie,Deren Chen

DOI: https://doi.org/10.1109/icie.2010.292

2010-01-01

Journal of Networks

Abstract:To use the network services provided by multiple servers in mobile wireless network, a hash function and smart card based multi-server authentication scheme without verification tables and servers' public keys is proposed. The new protocol has many advantages, such as no encryption, signature, verification tables, timestamp, and public keys directory.
Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

Jianbin Hu,Hu Xiong,Zhi Guan,Cong Tang,Yonggang Wang,Wei Xin,Zhong Chen

DOI: https://doi.org/10.1109/ISPAW.2011.15

2011-01-01

Abstract:Key agreement protocols are multi-party protocols in which entities exchange public information allowing them to create a common secret key that is known only to those entities and which cannot be predetermined by any party. Recently, the notion of certificateless public key cryptography was introduced to mitigate the heavy certificate management burden in traditional public key infrastructure and key escrow problem in ID-based cryptosystem. In this paper, we present an efficient certificateless three-party authenticated key agreement protocol based on certificateless signature scheme. We show that the proposed protocol is secure (i.e. conforms to defined security attributes) while being efficient.
A Novel Hybrid CA Service System for Ad Hoc Network Security

宁红宙,刘云,何德全

DOI: https://doi.org/10.3969/j.issn.1003-3033.2004.09.021

2004-01-01

Abstract:For the wireless distribution and auto-organization of Ad hoc network, the network security is very vulnerable. And for the characteristics of no infrastructure and limited computation of Ad hoc network, the security system is difficult to array. After analyzing the merits and demerits of the traditional and distributed CA system, a novel hybrid CA service system for Ad hoc network is presented, in which the certificates issue and certificates management are separated. This system not only enhances the security, but also reduces the computation load of Ad hoc network. At the same time, certificates revocation, certificates verification, creditability table maintenance and update in distributed certificates management are analyzed in detail. By using the creditability coefficient α to describe the creditability of certificates, the reliability and flexibility of the distributed certificates management are greatly increased.
A Distributed Certificate Revocation Scheme for Ad Hoc Networks

ZHONG Huan,XU Chun-xiang,QIN Zhi-guang

DOI: https://doi.org/10.3969/j.issn.1001-0548.2007.03.004

2007-01-01

Abstract:By analyzing the problem of certificate revocation scheme existing in Ad Hoc network, this paper presents a new distributed certificate revocation scheme. The algorithm and the whole process of revocation are included in this scheme. By introducing four factors, the algorithm of certificate revocation becomes more perfect. The monitoring ability and enthusiasm of each node are enhanced as well. Besides, the traffic load in the process of certificate revocation is effectively reduced after requiring that each node maintain and refresh its two tables.
Multi-collaborative Certificate Validation Agent System

关勇,余少华,戴一奇

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.20.011

2004-01-01

Abstract:This paper presents the concept of multi-collaborative certificate validation agent to centralize processing these activities , designs a uniform message format to hide the variety of difference about current certificate validation protocol and gives a series of message communications mechanism,which is more valuable to be refered.
Circle Quorum System-Based Non-Stop Network Service Model

Song Ping,Sun Jian-ling,He Zhi-jun

DOI: https://doi.org/10.1631/jzus.2004.0550

2004-01-01

Abstract:Rapid developments in network systems of business service have resulted in more reliance on distributed computing, typified by “subscriber/push” architectures. Unfortunately, frequent and unexpectable network failures were routine, and downtime was not in hours, but in days. High availability has become the most important factor decreasing business risk and improving Quality of Service. Cluster technology has solved the non-stop problem on Local Area Network. However, most technologies including cluster today fail to ensure the non-stop Internet service based on Routers. With good performance on high availability and fault tolerance, quorum systems are very suitable for application to distributed business service networks. In this work, we modeled and developed a non-stop Internet service system based on a new quorum system, circle quorum system, for Boston Mutual Fund Broker, US. With five protocols, it provided highly available data services for clients on Internet.
A Secure Self-organized Certificate Management Scheme

LIU Fu-li,WU Bin,YANG Shou-bao,JI Wen

DOI: https://doi.org/10.3969/j.issn.1009-8054.2009.09.046

2009-01-01

Abstract:Public key certificate is an important carrier for public key. With the development of self-organized networks and distributed networks, such as Ad Hoc Networks, a secure self-organized certificate management scheme is required urgently. In this paper, a new one-way hash chain based self-organized certificate management scheme is proposed. In this scheme, nodes themselves can create, disseminate, renew, certify and revoke the certificate without the supports by third trusted party online. As its security relies on the security of private key and the one-way hash chain, this scheme is more secure than previous ones.
Improvement for Certificate Manage Protocol

Bao Li

2004-01-01

Abstract:In Public Key Infrastructure, Certificate Authorities use certificate management protocol to communicate with other entities, in order to implement the function of certificate management.In this paper,the draft of certificate management protocol brought by PKIX is analyzed,then a improvement for it is designed and formally analyzed using BAN logic,to achieve interoperability and security.
An Efficient Delegation-Based Anonymous Authentication Protocol

Jianqing Fu,Jian Chen,Rong Fan,XiaoPing Chen,Lingdi Ping

DOI: https://doi.org/10.1109/wcse.2009.731

2009-01-01

Abstract:With the widespread use of mobile devices, authentication and privacy of identification become important issues. We analyzed the security flaws and shortcomings of a delegation-based authentication protocol which was proposed by Caimu Tang, et al., and provided an improved protocol. We use elliptic-curve cryptography and hash chain to ensure the safety of system in our scheme. The research results reveal that the improved protocol can not only corrects the security flaws but also improve the efficiency of key management and reduce the computational load.
Secure Vehicle-To-Roadside Communication Protocol Using Certificate-Based Cryptosystem

Hu Xiong,Zhiguang Qin,Fagen Li

DOI: https://doi.org/10.4103/0256-4602.62783

2010-01-01

IETE Technical Review

Abstract:As various applications of vehicular ad hoc networks (VANETs) have been proposed, security has become one of the big research challenges and is receiving increasing attention. In this paper, we propose a secure and an efficient vehicle-to-roadside communication protocol by using the recently developed concepts of a certificate-based cryptosystem. The proposed approach combines the best aspects of identity-based public key cryptography approaches (implicit certification) and traditional public key infrastructure approaches (no key escrow). As compared with the previous works, which were implemented with the traditional public key infrastructure and identity-based public key cryptography, the proposed approach is more secure and efficient.
Scalable Byzantine Fault Tolerant Public Key Authentication for Peer-to-Peer Networks

Ruichuan Chen,Wenjia Guo,Liyong Tang,Jianbin Hu,Zhong Chen

DOI: https://doi.org/10.1007/978-3-540-85451-7_64

2008-01-01

Abstract:Peer-to-Peer (P2P) communication model has the potential to harness huge amounts of resources. However, due to the self-organizing and self-maintaining nature, current P2P networks suffer from various kinds of attacks. Public key authentication can provide a fundamental building block for P2P communication security. In this paper, we propose a scalable Byzantine fault tolerant public key authentication scheme for P2P networks, in which each participating peer dynamically maintains a trusted group to perform distributed challenge-response authentication without centralized infrastructure. To guarantee the authentication correctness, we additionally present a complementary trusted group maintenance scheme. The experimental results demonstrate that our authentication scheme can work in various different P2P scenarios effectively and efficiently.
Distributed adaptive multi-hop certification authority scheme for mobile Ad Hoc networks

Xuezhi, Tan,Shaochuan, Wu,Shilou, Jia

2005-01-01

Abstract:This paper theoretically analyzes a deficiency of the existing scheme, and proposes a distributed multi-hop certification authority scheme for mobile Ad Hoc networks. In our design, we distribute the certification authority functions through a threshold secret sharing mechanism, in which each node holds a secret share and multiple nodes jointly provide complete services. Certification authority is not limited in a local neighborhood but can be completed within multi-hop location. In addition, we replace broadcast by multicast to improve system performance and reduce communication overhead. This paper resolves some technical problems of ubiquitous certification authority services, and presents a wieldy multi-hop certification authority algorithm. Simulation results confirm the availability and effectiveness of our design.
Research on encryption, authentication and key update mechanism for CCSDS-TC protocol

Chen Hong

DOI: https://doi.org/10.1088/1742-6596/1650/3/032040

2020-10-01

Journal of Physics: Conference Series

Abstract:Abstract In view of the shortcomings of the CCSDS-TC protocol key update mechanism, this paper proposes a satellite-ground key update scheme suitable for space communication. This article analyzes the encryption and authentication methods of the CCSDS-TC protocol, builds a satellite communication protocol simulation platform on OPNET, and implements the proposed satellite-ground key update scheme, encryption and authentication methods. The simulation test of the dynamic update of satellite-ground key and the simulation results of data security transmission denote that the proposed satellite-ground key update scheme in this paper has good security, scalability and low resource consumption, and can provide a secret key parameter which reveals important practical value.
Research on Short Message-based Digital Certificate Status Broadcasting System

HONG Huan-jian,TENG Ran-ran,ZHENG Jian-hua,DAI Yi-qi

DOI: https://doi.org/10.3969/j.issn.1001-3695.2006.08.048

2006-01-01

Abstract:In any security applications based PKI,the validation of the digital certificates is important to the system's security.This paper briefly describes the actual implementation of the On-line Certificate Status Protocol(OCSP) on Internet and explains why the crypto-mobile-phone cannot check the certificate status on-line as on Internet.It introduces a new certificate revocation status-broadcasting scheme that efficiently resolves the problem of checking certificate revocation status in wireless environment and improves the security level of crypto-mobile-phone.
Study of Certificate in Secure Active Networks

Nie Fei,Li Zengzhi,CHEN Yan,Qi Jianjun

DOI: https://doi.org/10.3969/j.issn.1000-3428.2005.05.051

2005-01-01

Abstract:Traditional certificate will lose efficiency considerablely for active network. Code certificate was put forward in the article to overcome it; code certificate changes the entity from the publisher to code itself. So active node can grant privilege to the active protocol more detailed. The change of the entity makes it possible to add the resource usage information of the protocol in the certificate, which makes it more effective than traditional ACL mode, too. The principle and implementation are described in the article and a simulation test was made. The simulation result shows that code certificate can improve efficiency about 25 percent for sensitive operation than traditional certificate method.
A Distributed Adaptive Multi-Hop Certification Authority Scheme for Mobile Ad Hoc Networks

TAN Xue-zhi,WU Shao-chuan,JIA Shi-lou

DOI: https://doi.org/10.3969/j.issn.1005-9490.2005.03.054

2005-01-01

Abstract:This paper theoretically analyzes a deficiency of the existing scheme, and proposes a distributed multi-hop certification authority scheme for mobile Ad Hoc networks. In our design, we distribute the certification authority functions through a threshold secret sharing mechanism, in which each node holds a secret share and multiple nodes jointly provide complete services. Certification authority is not limited in a local neighborhood but can be completed within multi-hop location. In addition, we replace broadcast by multicast to improve system performance and reduce communication overhead. This paper resolves some technical problems of ubiquitous certification authority services, and presents a wieldy multi-hop certification authority algorithm. Simulation results confirm the availability and effectiveness of our design.
A CA-based Scheme of User Authentication over Content-Centric Networking

Kai Lei,Zhongjie Wang

DOI: https://doi.org/10.1109/iccse.2012.6295245

2012-01-01

Abstract:Content-Centric Networking (CCN) is a predominant substitute of the current TCP/IP networking and it is proposed to be the next generation Internet foundation. The evident characteristic of this network architecture is caching and indexing contents by the inner nodes - the routers, so as to reduce the redundant transmission and thereby shorten the distance between user and content. In this paper, we propose and implement a user authentication scheme over CCN. We adopt the trust model based on certificate authority (CA) to provide the service of binding certificate with user's identity, and help user determine the authenticity and reliability of the publisher of the network content. Also the specialized CA we designed for CCN takes advantage of the decentralization characteristic and cache mechanism of CCN to distribute the certificates and certificate revocation list (CRL) into the network, and it reduces the load of the CA central server when retrieving and verifying certificates. Besides, we propose a timeline-based method to segment the CRL with certificate issue date, thereby making the retrieval of CRL more effective.

Certificate Update Protocol in Asynchronous Networks

Inter-domain authentication scheme for Pervasive Computing Environments

An Asynchronous Multi-Channel MAC Protocol for Cooperative Networks.

Distributed Certification Application Via a Trusted Dealer

Hash Function and Smart Card Based Multi-Server Authentication Protocol

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

A Novel Hybrid CA Service System for Ad Hoc Network Security

A Distributed Certificate Revocation Scheme for Ad Hoc Networks

Multi-collaborative Certificate Validation Agent System

Circle Quorum System-Based Non-Stop Network Service Model

A Secure Self-organized Certificate Management Scheme

Improvement for Certificate Manage Protocol

An Efficient Delegation-Based Anonymous Authentication Protocol

Secure Vehicle-To-Roadside Communication Protocol Using Certificate-Based Cryptosystem

Scalable Byzantine Fault Tolerant Public Key Authentication for Peer-to-Peer Networks

Distributed adaptive multi-hop certification authority scheme for mobile Ad Hoc networks

Research on encryption, authentication and key update mechanism for CCSDS-TC protocol

Research on Short Message-based Digital Certificate Status Broadcasting System

Study of Certificate in Secure Active Networks

A Distributed Adaptive Multi-Hop Certification Authority Scheme for Mobile Ad Hoc Networks

A CA-based Scheme of User Authentication over Content-Centric Networking