Abstract:Public key infrastructure (PKI) plays a fundamental role in securing the infrastructure of the Internet through the certification of public keys used in asymmetric encryption. It is an industry standard used by both public and private entities that costs a lot of resources to maintain and secure. On the other hand, identity-based cryptography removes the need for certificates, which in turn lowers the cost. In this work, we present a practical implementation of a hybrid PKI that can issue new identity-based cryptographic keys for authentication purposes while bootstrapping trust with existing certificate authorities. We provide a set of utilities to generate and use such keys within the context of an identity-based environment as well as an external environment (i.e., without root trust to the private key generator). Key revocation is solved through our custom naming design which currently supports a few scenarios (e.g., expire by date, expire by year and valid for year). Our implementation offers a high degree of interoperability by incorporating X.509 standards into identity-based cryptography (IBC) compared to existing works on hybrid PKI–IBC systems. The utilities provided are minimalist and can be integrated with existing tools such as the Enterprise Java Bean Certified Authority (EJBCA).

Study on Hybrid Key Management Mechanisms of RFID System Based on PKI and CPK

Inter-domain authentication scheme for Pervasive Computing Environments

Scalable Pseudo Random RFID Private Mutual Authentication

A Lightweight Key Management Scheme For 60 Ghz Wpan

Secure Information Exchange Model Between PDM Systems

A Centralized Key Management Scheme Based on McEliece PKC for Space Network

An Efficient CPK-based Key Management Scheme in Wireless Sensor Networks

A Secure RFID System Based on Mutual Authentication

A Mutual Authentication Improvement for Traditional Unidirectional ECDLP-Based RFID Authentication Protocols

Public-Key cryptosystem based key management scheme in 3G system

PUF-Based RFID Authentication Protocol Against Secret Key Leakage

Key Management in Ad Hoc Networks Using Self-Certified Public Key System

The Design and Implementation of Campus Networks Security System Based on Public Key Infrastructure (PKI)

An Authentication Protocol Based on Key Array for RFID

Pkim: A Public Key Infrastructure for Mobile Ad Hoc Network

An RFID Security Mechanism Based on the Bi-Directional Authentication with Aliases

A Key Management Scheme for Mobile Ad Hoc Networks Based on Threshold Cryptography for Providing Fast Authentication and Low Signaling Load

Security and Privacy on Authentication Protocol for Low-cost RFID

An Implementation Suite for a Hybrid Public Key Infrastructure

A New Key Management Scheme for Field Operation Ad Hoc Networks

RESEARCH ON A PKI-BASED IoT SECURITY MODEL