A practical scheme of merging multiple public key infrastructures in e-commerce

Authors:
Heng Pan;JingFeng Li;YueFei Zhu;DaWei Wei
Affiliations:
Institute of Information Engineering, Information Engineering University, Zhengzhou, China;Institute of Information Engineering, Information Engineering University, Zhengzhou, China;Institute of Information Engineering, Information Engineering University, Zhengzhou, China;Institute of Electronic Technology, Information Engineering University, Zhengzhou, China
Venue:
ICCNMC'05 Proceedings of the Third international conference on Networking and Mobile Computing
Year:
2005

Citing 7
Cited 1

PKI: Implementing and Managing E-Security

PKI: Implementing and Managing E-Security
Cryptography and Network Security: Principles and Practice

Cryptography and Network Security: Principles and Practice
Modelling Trust Structures for Public Key Infrastructures

ACISP '02 Proceedings of the 7th Australian Conference on Information Security and Privacy
A State-Based Model for Certificate Management Systems

PKC '00 Proceedings of the Third International Workshop on Practice and Theory in Public Key Cryptography: Public Key Cryptography
A Merging Method of Certification Authorities Without Using Cross-Certifications

AINA '04 Proceedings of the 18th International Conference on Advanced Information Networking and Applications - Volume 2
New adaptive trust models against DDoS: back-up CA and mesh PKI

HSI'03 Proceedings of the 2nd international conference on Human.society@internet
An overview of PKI trust models

IEEE Network: The Magazine of Global Internetworking

PROSEARCH: a protocol to simplify path discovery in critical scenarios

CRITIS'06 Proceedings of the First international conference on Critical Information Infrastructures Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

With the development of E-commerce, many companies have built their own Public Key Infrastructure (PKI) to support various security services. When consolidation or combine of different companies happens, the multiple PKIs deployed by different companies should be reconstructed into a new one. The ordinary ways depend on using cross-certificates, and the complexity of the certificate path construction and validation is still difficult to avoid. Considering the specialties of the context in E-commerce, without using cross-certificates, our paper proposes a practical merging scheme, which is based on hierarchy structure. Making a small change of those existing PKIs, the whole merging process is quick and low-cost. Moreover, compared with using cross- certificates, the path construction is much more efficient and convenient. Additionally, in order to describe clearly, some conceptions used in our scheme are formalized.