A new united certificate revocation scheme in grid environments

Authors:
Ying Liu;Sheng-rong Wang;Jing-bo Xia;Jun Wei
Affiliations:
Telecommunication Engineering Institute, Air Force Engineering University, Xi’an, shaanxi, P.R. China;Telecommunication Engineering Institute, Air Force Engineering University, Xi’an, shaanxi, P.R. China;Telecommunication Engineering Institute, Air Force Engineering University, Xi’an, shaanxi, P.R. China;Telecommunication Engineering Institute, Air Force Engineering University, Xi’an, shaanxi, P.R. China
Venue:
GCC'05 Proceedings of the 4th international conference on Grid and Cooperative Computing
Year:
2005

Citing 5
Cited 0

Can We Eliminate Certificate Revocations Lists?

FC '98 Proceedings of the Second International Conference on Financial Cryptography
On Certificate Revocation and Validation

FC '98 Proceedings of the Second International Conference on Financial Cryptography
Efficient and Fresh Cerification

PKC '00 Proceedings of the Third International Workshop on Practice and Theory in Public Key Cryptography: Public Key Cryptography
Security for Grid Services

HPDC '03 Proceedings of the 12th IEEE International Symposium on High Performance Distributed Computing
A More Efficient Use of Delta-CRLs

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper analyses security drawbacks of traditional certificates revocation in GSI. And we bring forward a new united certificate revocation scheme. In our scheme, one-way hash chains, novel multiple certificates and CRLs shared mode are proposed to improve the revocation mechanism. So partial functions of CA are distributed to other Grid nodes, congestion and single-point failure is avoided in Grid environments. The certificates issued by different CAs could carry out mutual authentication, and users can verify the validity of certificates without retrieving the revocation information from the CA which issues the certificates. To study the performance, three classical revocation schemes are used to compare with our united revocation scheme in the experiments. Simulation results and analysis show that the peak request value of united revocation is lower than other three schemes and the peak bandwidth value is narrower and the risk is reduced.