Abstract:Although Resource Public Key Infrastructure (RPKI) is critical for securing inter-domain routing, we find that its key component, the RPKI Repository, is under studied.We conduct the first data-driven analysis of the existing RPKI Repository infrastructure, including a survey of worldwide AS administrators and a large-scale measurement of the existing RPKI Repository.Based on the findings of our study, we identify three key problems.Firstly, misbehaving RPKI authorities can easily manipulate RPKI objects, and Internet Number Resources holders (INRs holders) and Relying Parties (RPs) can neither prevent malicious behaviors of misbehaving authorities nor hold them accountable.Secondly, RPKI Repository is sensitive to failures: An attack or downtime of any repository Publication Point (PP) will prevent RPs from obtaining complete RPKI object views.Finally, we identify scalability issues with the current RPKI Repository, which are expected to worsen with the further deployment of Route Origin Authorization (ROA).To address these problems, we propose dRR, an architecture that enhances the security, robustness, and scalability of the RPKI Repository while being compatible with standard RPKI.By introducing two new entities: Certificate Servers (CSs) and Monitors, dRR forms a decentralized federation of CSs, which enables the RPKI Repository to proactively defend against malicious behavior from authorities and to tolerate PPs' failures.dRR is also scalable for future large-scale deployment.We present the design of dRR in detail and implement a prototype of dRR on a global Internet testbed spanning 15 countries.Experimental results show that, although new security features are introduced, dRR only incurs negligible latency for certificate issuance and revocation.The throughput of certificate updates achieved by dRR is 450 times higher than the current maximum RPKI certificate update frequency.

Design and Implementation of RPMI System Based on PKI

Researche on Design of Biometric Authentication System

Inter-domain authentication scheme for Pervasive Computing Environments

Secure Information Exchange Model Between PDM Systems

The Design of an Useful Security Management Model of PDMS and Its Realization

R2P: A Peer-to-Peer Transfer System Based on Role and Reputation

Research on Information Security Model and Security System Design

The Solution of Security of Web Application Based on PKI/PMI

An Implementation Suite for a Hybrid Public Key Infrastructure

A Study on CRL Revocation Delay of PKI

Research and implementation of access control on resource integration

General Model and Implementation of Security Management of PDM

Resource Public Key Infrastructure RPKI: Status and Problems

The Design of Secure Document Management System

PKI:Fundamental of Secure Electronic Commerce

Drr: A Decentralized, Scalable, and Auditable Architecture for RPKI Repository

Design and Implementation of a Server-Aided PKI Service (SaPKI)

Discussion on the evaluation of PKUPH RRP system

SoK: An Introspective Analysis of RPKI Security

RPKI: Not Perfect But Good Enough

Research on Security System for PDM