Abstract:As the voucher for identity, digital certificates and the public key infrastructure (PKI) system have always played a vital role to provide the authentication services. In recent years, with the increase in attacks on traditional centralized PKIs and the extensive deployment of blockchains, researchers have tried to establish blockchain-based secure decentralized PKIs and have made significant progress. Although blockchain enhances security, it brings new problems in scalability due to the inherent limitations of blockchain’s data structure and consensus mechanism, which become much severe for the massive access in the era of 5G and B5G. In this paper, we propose ScalaCert to mitigate the scalability problems of blockchain-based PKIs by utilizing redactable blockchain for "on-cert" revocation. Specifically, we utilize the redactable blockchain to record revocation information directly on the original certificate ("on-cert") and remove additional data structures such as CRL, significantly reducing storage overhead. Moreover, the combination of redactable and consortium blockchains brings a new kind of attack called deception of versions (DoV) attack. To defend against it, we design a random-block-node-check (RBNC) based freshness check mechanism. Security and performance analyses show that ScalaCert has sufficient security and effectively solves the scalability problem of the blockchain-based PKI system.

Distributed Access Control Using SPKI Delegation Certificates

Distributed Certification Application Via a Trusted Dealer

An Efficient Delegation-Based Anonymous Authentication Protocol

Trustworthiness Calculation Based on Delegation Relationship in E-service

Using trust for restricted delegation in grid environments

A Certificate-Less Distributed Key Management Scheme for Space Networks

ScalaCert: Scalability-Oriented PKI with Redactable Consortium Blockchain Enabled "On-Cert" Certificate Revocation

A distributed key generation technique for public key infrastructures

Distributed hierarchical access control for secure group communications

Dynamic Authorization Scheme Based on Delegation in Distributed System

Xml-Based Revocation and Delegation in A Distributed Environment

The Design and Implementation of a Distributed Access Control System Based on Trust-Management

Distribution Of Ca-Role In Block-Chain Systems

Review of Key-Based Dynamic Trust Authorization Mechanism

A Distributed Certificate Revocation Scheme for Ad Hoc Networks

A small world based public key management scheme for large scale mobile ad hoc networks

A Blockchain-Based Decentralized Public Key Infrastructure Using the Web of Trust

Decentralized Public Key Infrastructures Atop Blockchain.

Research On Key-Based Trust Model

Key Management in Ad Hoc Networks Using Self-Certified Public Key System

Scheme of Distributed Certification Based on Polynomial Share