Abstract:Public key infrastructure (PKI) plays a fundamental role in securing the infrastructure of the Internet through the certification of public keys used in asymmetric encryption. It is an industry standard used by both public and private entities that costs a lot of resources to maintain and secure. On the other hand, identity-based cryptography removes the need for certificates, which in turn lowers the cost. In this work, we present a practical implementation of a hybrid PKI that can issue new identity-based cryptographic keys for authentication purposes while bootstrapping trust with existing certificate authorities. We provide a set of utilities to generate and use such keys within the context of an identity-based environment as well as an external environment (i.e., without root trust to the private key generator). Key revocation is solved through our custom naming design which currently supports a few scenarios (e.g., expire by date, expire by year and valid for year). Our implementation offers a high degree of interoperability by incorporating X.509 standards into identity-based cryptography (IBC) compared to existing works on hybrid PKI–IBC systems. The utilities provided are minimalist and can be integrated with existing tools such as the Enterprise Java Bean Certified Authority (EJBCA).

Design and Implementation of an X. 509 Certificate Library

Inter-domain authentication scheme for Pervasive Computing Environments

Solution to VPN and Authentication System

Implementation Issues and Countermeasures Facing RFID Applications in Libraries

Standard Interchange Protocol 2: Theory, Design and Implementation

Design and Implementation of Unified Access Control System Based on LDAP

A Design Scheme of Enterprise Secure Communication Platform

DESIGN OF A SECURE FRAMEWORK TO SECURELY EXCHANGE(XML-BASED)DOCUMENTS OVER THE INTERNET

The Design and Implementation of a Certificate-based Secure Multimedia Conference System MCS/CA

The Integration of LDAP and Kerberos System

PKCS-Based Data Security Framework and Its Supporting Library Design

Research and Design of XKMS-based Centralizing Identity Management System

Design and Implementation of a Cross-platform Protocol Independent Network Class Library

Design and Implementation of a Kind of Secure Tunnel Gateway System

Design and Implementation of Multi-Domain and Multi-System Identity Authentication Based on Certificate

A High Strength PKI Structure Designof Network Transmission

Using OPENSSL to Realize CA Authentication

The Design and Implementation of the Secure Mechanism for an Internet-Based Secure Electronic Commerce System

Security Architecture on the Trusting Internet of Things

XBSIA:A Kind of XML-Based Security Integrated Architecture

An Implementation Suite for a Hybrid Public Key Infrastructure