Design of Public Key Infrastructure System

孟桂娥,董玮文,杨宇航

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.06.047

2001-01-01

Abstract:The thesis introduces the goal of the PKI system design ,analyzes the critical problems in PKI system development ,discusses the certificate-related data objects processing,the secure socket layer,the PKI interface of browser in detail.

What problem does this paper attempt to address?

Researche on Design of Biometric Authentication System

zhu jianxin,yang xiaohu,dong jinxiang,cao zhexin

DOI: https://doi.org/10.3321/j.issn:1002-8331.2002.10.030

2002-01-01

Abstract:The reliable identity authentication will ensure the security of information system firstly.The technology of biometric authentication will provide a more reliable and more secure method to protect the security of information system.This paper analyzes a generalized biometric identification system reference model,then point s out that this model will help the design of architecture in the biometric authentication system.The paper also analyzes the main issues that must be considered in the design of biometric authentication system,then introduces an example -the design of fingerprint-based authentication system in network environment.
Inter-domain authentication scheme for Pervasive Computing Environments

YAO Lin,FAN Qingna,KONG Xiangwei

DOI: https://doi.org/10.3778/j.issn.1002-8331.2011.06.023

2011-01-01

Abstract:As a result of the high mobility of the pervasive computing,the principles communicating with each other usually locate at different domains.To secure the service access and communications,the principles should authenticate each other and establish a fresh session key.A novel inter-domain authentication and key establishment protocol is proposed.The proposed protocol reduces the burden of certificates management by adopting the biometric encryption.After inter-domain mutual authentication,the two principles build a new session key using the signcryption technique.The protocol can defend lots of attacks and its correctness is proven by the SVO logic.
PKI:Fundamental of Secure Electronic Commerce

Yajie Li,Qiufeng Wu,Meng Yuan

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.10.015

2001-01-01

Abstract:The development of electronic commerce requires the high security of network communication,PKI is an effective solution. This paper introduces basic structure,evaluation standard and major design problems of PKI.
PKI Technology for Data Encryption

Zhu Zhenfang

Abstract:These PKI is a kind of follow the standard use of public key encryption technology for the development of e-commerce to provide a secure foundation platform technology and specifications. The application of digital certificates is under the network environment to solve the problem such as identity authentication, access control, and information protection. This thesis mainly studied the part of the problem, this paper introduced the basic knowledge of cryptography and PKI theory foundation and basic system, of several common PKI trust model had carried on the detailed introduction, designed the distributed network environment, interconnection security platform of authentication and information encryption module.

Computer Science,Engineering
The Solution of Security of Web Application Based on PKI/PMI

Wu Peng,Su Xinning

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.06.001

2006-01-01

Abstract:At present,the main research fields of security technology are network security,security protocol and encryption arithmetic.The research of security of application layer is want,and ongoing research projects is part application oriented,such as safe mail system,safe document system.This paper designs a Web application security total solution based on PKI/PMI,to implement security control for application layer,and proposes the method to implement by an instance.
Design and Implementation of RPMI System Based on PKI

关勇,余少华,戴一奇

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.21.017

2004-01-01

Abstract:This paper presents a RPMI model to solve the limitations in PKIsystems. presents a role-based PMI model, prompts the RPMI system's modules framework and running mechanism based on PKI and gives the RPMI model's two main part of realization: one is role disposing module,the other is privilege verifier module. This RPMI system is applied to an ISPs PKI/PMI management project and gets a success .
THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

SHAO Bing,LU Dong-ming

2000-01-01

Abstract:Data encryption is one of the key techniques for information security. In the beginning of this paper, the present encryption methods are analyzed. Next, we design one practical system which can transmits data in the Internet and has the capacity of digital signature and authentication. Finally, some technical issues encountered in the system implementation are discussed
The Design of Secure Document Management System

马晨华,陆国栋,钟云伟

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.19.022

2003-01-01

Abstract:This paper presents a three-tier secure document management system, using PKI, session key and RBAC. This system provides a key exchange protocol prolvodes in order to secure the encrypted documents in clients and only the users who own the proper key can read them. The middleware-tier constructs a RBAC authority database and utilizes SQL language to descript the constraint policies, providing an efficient way to implement role-based access control.
Research on Information Security Model and Security System Design

黄益民,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2001.06.005

2001-01-01

Abstract:After study of existing security models; analysis of information flow model, Bell-LaPadula(BLP) access control model and Biba access control model; and collation and comparison of their advantages and disadvantages, an improved model is put forward that satisfies the actual demands of information security. An implementation strategy is put forward that ensures information security, reliability, practicality and compatibility in the designed security system. An implementation scheme of this security system and its components and functions is provided. This system combines the following functions: mandatory access contro1, privilege separation, security audit, identity authentication and self-protection. It achieves the level 3 of national information security standard and level B1 of TCSEC standard. It was implemented in the Windows NT and Linux operating system and has yielded good resultsin application.
Design of Proxy-based Public Key Cryptographic Application System

LI Dong-feng,WEI Ming-Xin,LI Wei-ping

DOI: https://doi.org/10.3969/j.issn.1009-8054.2011.09.049

2011-01-01

Abstract:As considerable quantities of complex cryptographic computation should be done on client side in the traditional public key cryptosystems,it's difficult for the PKI technology to be used in the special case with weak computation capability. In addition,the communication between digital certificate and authentication is required,thus to obtain the CRLs as certificate chain and verify the validity of online certificate,this would greatly reduce the application and development of public key cryptographic technology. In the proposed proxy-based application model,the computation and communication are completed via the proxy service,and the client just needs to send standard application request and accept the corresponding response,thus effectively simplifying the application of public key cryptography.
Study on Electronic Signature Technology Based on Combined Public Key

范志强,李成,马兆丰,芦效峰,钮心忻

DOI: https://doi.org/10.3969/j.issn.1009-8054.2011.07.044

2011-01-01

Abstract:With the development of e-government and e-commerce,the electronic documents have gradually replaced traditional paper-based documentation. Thus,how to ensure the security of the electronic document has become the key to the farther successful application of e-government and e-business.？The adoptions of CPK（Combined Public Key） in the design of electronic signature system and ID certificate in digital signature and verification,could make any two users confirm public key information only by their own identity labels with any dependence the trusted third party validation,thus simplifying the key exchange agreement,ensuring the documents integrity,confidentiality and undesirability,and realizing the efficient safe electronic signature system.
Application of PKI Technology to Kunming Power Supply Bureau

ZHAO Yang

DOI: https://doi.org/10.3969/j.issn.1672-4844.2012.09.018

2012-01-01

Abstract:To reduce security risks of business application systems at a maximum extent, and fully ensure them security, this paper describes the construction of a unified PKI/CA digital identity certification system with the Public Key Infrastructure (PKI) technology as the core. The system uses a unified identity certification method for information system accesses, effectively integrates the PKI/CA system with information application systems, and solves complex security management problems for business systems. The system has been put into operation in Kunming power supply bureau, which builds an information security basis platform for enterprise’s applications, and provides a reliable security standard for enterprise informatization construction and application system development.
Security Middleware for Enhancing Interoperability of Public Key Infrastructure

KY Lam,SL Chung,M Gu,JG Sun

DOI: https://doi.org/10.1016/s0167-4048(03)00615-1

IF: 5.105

2003-01-01

Computers & Security

Abstract:This paper describes a security middleware for enhancing the interoperability of public key infrastructure (PKI). Security is a key concern in e-commerce and is especially critical in cross-enterprise transactions. Public key cryptography is widely accepted as an important mechanism for addressing the security needs of e-commerce transactions because of its ability to implement non-repudiation. The deployment of public key cryptography is facilitated by the provision of PKI which assures the integrity of cryptographic keys. Nevertheless, industry experiences have shown that the task of implementing PKI-based e-commerce applications is challenging. Prior studies have identified interoperability as a major issue that hinders the adoption of PKI in spite of its effectiveness in implementing strong security mechanisms and protocols. In this paper, we discuss the interoperability issue of PKI applications. This research is part of our effort in designing security infrastructure for e-commerce systems. A middleware architecture was designed to enhance interoperability of PKI applications. The security middleware aims to promote cross-enterprise cross-border e-commerce transactions. The proposed mechanism is proven to be practical in real deployment environment.
Failures of public key infrastructure: 53 year survey

Adrian-Tudor Dumitrescu,Johan Pouwelse

2024-01-11

Abstract:The Public Key Infrastructure existed in critical infrastructure systems since the expansion of the World Wide Web, but to this day its limitations have not been completely solved. With the rise of government-driven digital identity in Europe, it is more important than ever to understand how PKI can be an efficient frame for eID and to learn from mistakes encountered by other countries in such critical systems. This survey aims to analyze the literature on the problems and risks that PKI exhibits, establish a brief timeline of its evolution in the last decades and study how it was implemented in digital identity projects.

Distributed, Parallel, and Cluster Computing,Cryptography and Security
Research and Realization of Wireless Communication Network Security Based on Public Key Infrastructure

张华

DOI: https://doi.org/10.3969/j.issn.1001-893x.2005.01.036

2005-01-01

Abstract:Security is becoming the key issue in current wireless communicating networks. In this paper Public Key Infrastructure( PKI) mechanism is proposed to protect network security. At first PKI is introduced, then the features and limitations of wireless communicating networks are discussed. A creative technology and solution is provided to apply PKI into wireless communicating networks. Finally a demo system using this solution is followed.
An Implementation Suite for a Hybrid Public Key Infrastructure

Jason Chia,Swee-Huay Heng,Ji-Jian Chin,Syh-Yuan Tan,Wei-Chuen Yau

DOI: https://doi.org/10.3390/sym13081535

2021-08-20

Symmetry

Abstract:Public key infrastructure (PKI) plays a fundamental role in securing the infrastructure of the Internet through the certification of public keys used in asymmetric encryption. It is an industry standard used by both public and private entities that costs a lot of resources to maintain and secure. On the other hand, identity-based cryptography removes the need for certificates, which in turn lowers the cost. In this work, we present a practical implementation of a hybrid PKI that can issue new identity-based cryptographic keys for authentication purposes while bootstrapping trust with existing certificate authorities. We provide a set of utilities to generate and use such keys within the context of an identity-based environment as well as an external environment (i.e., without root trust to the private key generator). Key revocation is solved through our custom naming design which currently supports a few scenarios (e.g., expire by date, expire by year and valid for year). Our implementation offers a high degree of interoperability by incorporating X.509 standards into identity-based cryptography (IBC) compared to existing works on hybrid PKI–IBC systems. The utilities provided are minimalist and can be integrated with existing tools such as the Enterprise Java Bean Certified Authority (EJBCA).
Design and Implementation of a Server-Aided PKI Service (SaPKI)

Liang Cai,Xiaohu Yang,Chun Chen

DOI: https://doi.org/10.1109/AINA.2005.150

2005-01-01

Abstract:More and more mobile applications require the ability to issue digital signatures. Traditionally, digital signatures are based on asymmetric cryptographic techniques which make them computationally expensive. Currently, all mobile devices tend to have limited computational capabilities and equally limited power. This makes them ill-suited for complex cryptographic computations. We designed a Server-aided PKI Service (SaPKI) to offload work from clients in mobile networks such as GSM and CDMA. Mobile clients can utilized the powerful (both CPU speed and power supply) SaPKI server to generate RSA keys and digital signatures. The paper details the implementation of SaPKI Service. A secure "cell phone-banking" application has been implemented on SaPKI architecture in CDMA-1X mobile network. After thorough performance analysis, we concluded that SaPKI can significantly improve the performance of mobile client's cryptographic operation.
An exploration of public key infrastructure applications across diverse domains: a comparative analysis

Oleksandr Dulia,Dmytro Minochkin

DOI: https://doi.org/10.20535/2411-1031.2023.11.2.293496

2023-12-28

Abstract:This article delves into the vital role of Public Key Infrastructure (PKI) in securing and authenticating communications across a multitude of fields. PKI has evolved from a mere technical concept into a cornerstone of secure digital communications, playing a central role in various domains such as web security, healthcare, finance, the Internet of Things (IoT), and government services. PKI employs cryptographic techniques and digital certificates to establish trust, ensure data integrity, and enable secure communications, thus acting as the backbone of digital security. In the wake of the digital revolution, the demand for reliable and robust security solutions has skyrocketed. The diversity and scale of modern digital platforms necessitate adaptable security solutions, a challenge which PKI tackles through its flexible implementation. Despite sharing core principles, the implementation of PKI demonstrates divergences influenced by factors such as scale, complexity, resource constraints, regulatory environments, and trust models. This article offers an extensive comparison of PKI's utilization across various domains, highlighting the commonalities and divergences. It explores how PKI is tailored to meet the unique requirements and challenges of each sector and discusses the certificate lifecycle management in varying contexts. Moreover, it provides an analysis of the current state of PKI applications and challenges, offering insights into the evolving landscape of threats and technologies. Not only does the article address the current state of PKI, but it also presents a forward-looking perspective on its potential future developments. As the digital landscape continues to evolve and expand, it is crucial to anticipate the emerging challenges and devise strategies for proactive adaptation. This article thus serves as a comprehensive resource for understanding the role and impact of PKI in the contemporary digital infrastructure. Ultimately, the article seeks to underline the importance of PKI and highlight the need for continued research and development in this area. As our reliance on digital communications and transactions continues to grow, the role of PKI in safeguarding these interactions becomes increasingly significant. This comprehensive review serves as a valuable resource for researchers, practitioners, and policymakers in understanding the diverse applications of PKI and its critical role in securing the digital world.
On the Practicality of Smart Contract PKI

Christos Patsonakis,Katerina Samari,Aggelos Kiayias,Mema Roussopoulos

DOI: https://doi.org/10.1109/DAPPCON.2019.00022

2019-02-03

Abstract:Public key infrastructures (PKIs) are one of the main building blocks for securing communications over the Internet. Currently, PKIs are under the control of centralized authorities, which is problematic as evidenced by numerous incidents where they have been compromised. The distributed, fault tolerant log of transactions provided by blockchains and more recently, smart contract platforms, constitutes a powerful tool for the decentralization of PKIs. To verify the validity of identity records, blockchain-based identity systems store on chain either all identity records, or, a small (or even constant) sized amount of data to verify identity records stored off chain. However, as most of these systems have never been implemented, there is little information regarding the practical implications of each design's tradeoffs. In this work, we first implement and evaluate the only provably secure, smart contract based PKI of [1] on top of Ethereum. This construction incurs constant-sized storage at the expense of computational complexity. To explore this tradeoff, we propose and implement a second construction which, eliminates the need for trusted setup, preserves the security properties of [1] and, as illustrated through our evaluation, is the only version with constant-sized state that can be deployed on the live chain of Ethereum. Furthermore, we compare these two systems with the simple approach of most prior works, e.g., the Ethereum Name Service, where all identity records are stored on the smart contract's state, to illustrate several shortcomings of Ethereum and its cost model. We propose several modifications for fine tuning the model, which would be useful to be considered for any smart contract platform like Ethereum so that it reaches its full potential to support arbitrary distributed applications.

Distributed, Parallel, and Cluster Computing
Resource Public Key Infrastructure RPKI: Status and Problems

SU Yingying,LI Dan,YE Honglin

DOI: https://doi.org/10.11959/j.issn.1000-0801.2021050

2021-01-01

Abstract:The BGP (border gateway protocol) did not fully consider security issues at the beginning of its design.With the rapid growth of the Internet, its security risks have become incrementally obvious.Academia and industry have proposed many solutions to the security issues faced by inter-domain routing, and what is really deployed is the RPKI (resource public key infrastructure) promoted by the IETF (the Internet Engineering Task Force).The development status and research advances of RPKI were surveyed, with emphasis on problems of RPKI, existing solutions, and related limitations.Moreover, latest achievements on RPKI function extension were introduced.Finally, future research directions were concluded.

Design of Public Key Infrastructure System

Researche on Design of Biometric Authentication System

Inter-domain authentication scheme for Pervasive Computing Environments

PKI:Fundamental of Secure Electronic Commerce

PKI Technology for Data Encryption

The Solution of Security of Web Application Based on PKI/PMI

Design and Implementation of RPMI System Based on PKI

THE DESIGN AND IMPLEMENTATION OF A TRANSMISSION SYSTEM WITH DATA ENCRYPTION

The Design of Secure Document Management System

Research on Information Security Model and Security System Design

Design of Proxy-based Public Key Cryptographic Application System

Study on Electronic Signature Technology Based on Combined Public Key

Application of PKI Technology to Kunming Power Supply Bureau

Security Middleware for Enhancing Interoperability of Public Key Infrastructure

Failures of public key infrastructure: 53 year survey

Research and Realization of Wireless Communication Network Security Based on Public Key Infrastructure

An Implementation Suite for a Hybrid Public Key Infrastructure

Design and Implementation of a Server-Aided PKI Service (SaPKI)

An exploration of public key infrastructure applications across diverse domains: a comparative analysis

On the Practicality of Smart Contract PKI

Resource Public Key Infrastructure RPKI: Status and Problems