TY - GEN
T1 - PROSEARCH
T2 - 1st International Workshop on Critical Information Infrastructures Security, CRITIS 2006
AU - Satizábal, Cristina
AU - Páez, Rafael
AU - Forné, Jordi
PY - 2006
Y1 - 2006
N2 - Authentication is a strong requirement for critical information systems, and Public Key Infrastructure (PKI) is widely used to provide this service. Peer-to-peer PKIs are quite dynamic and certification paths can be built although part of the infrastructure is temporarily unreachable, which is quite common after disasters or network attacks. However, certification path discovery is one of the main drawbacks of peer-to-peer PKIs that strongly affects their scalability. We propose a protocol to build a virtual hierarchical PKI from a peer-to-peer PKI, since certification path construction in hierarchical PKIs is straightforward. Our protocol does not require to issue new certificates, facilitates the certification path discovery process and it is adaptable to the characteristics of users with limited processing and storage capacity. Results show that the execution time of this protocol is short in critical scenarios.
AB - Authentication is a strong requirement for critical information systems, and Public Key Infrastructure (PKI) is widely used to provide this service. Peer-to-peer PKIs are quite dynamic and certification paths can be built although part of the infrastructure is temporarily unreachable, which is quite common after disasters or network attacks. However, certification path discovery is one of the main drawbacks of peer-to-peer PKIs that strongly affects their scalability. We propose a protocol to build a virtual hierarchical PKI from a peer-to-peer PKI, since certification path construction in hierarchical PKIs is straightforward. Our protocol does not require to issue new certificates, facilitates the certification path discovery process and it is adaptable to the characteristics of users with limited processing and storage capacity. Results show that the execution time of this protocol is short in critical scenarios.
KW - Certification path discovery
KW - Critical information systems
KW - Hierarchical trust model
KW - Peer-to-peer trust model
KW - Public key infrastructure (PKI)
UR - https://www.scopus.com/pages/publications/79955110795
U2 - 10.1007/11962977_13
DO - 10.1007/11962977_13
M3 - Conference contribution
AN - SCOPUS:79955110795
SN - 3540690832
SN - 9783540690832
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 151
EP - 165
BT - Critical Information Infrastructures Security - First International Workshop, CRITIS 2006, Revised Papers
Y2 - 31 August 2006 through 1 September 2006
ER -