PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage Management
In the recent years, the vulnerabilities of conventional public key infrastructure are exposed by the real-world attacks, such as the certificate authority’s single-point-of-failure or clients’ private information leakage. Aimed at the first issue, one type of approach is that...
| Main Authors: | , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2019-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/8590825/ |
| _version_ | 1818912993866416128 |
|---|---|
| author | Shixiong Yao Jing Chen Kun He Ruiying Du Tianqing Zhu Xin Chen |
| author_facet | Shixiong Yao Jing Chen Kun He Ruiying Du Tianqing Zhu Xin Chen |
| author_sort | Shixiong Yao |
| collection | DOAJ |
| description | In the recent years, the vulnerabilities of conventional public key infrastructure are exposed by the real-world attacks, such as the certificate authority’s single-point-of-failure or clients’ private information leakage. Aimed at the first issue, one type of approach is that multiple entities are introduced to assist the certificate operations, including registration, update, and revocation. However, it is inefficient in computation. Another type is to make the certificate information publicly visible by bringing in the log servers. Nevertheless, the data synchronization among log servers may lead to network latency. Based on the second approach, the blockchain-based public key infrastructure schemes are proposed. Through these type of schemes, all the certificate operations are stored in the blockchain for public audit. However, the issue of revoked certificates’ status storage is worth paying attention, especially in the setting with massive certificates. In addition, the target web server that a client wants to access is exposed in the process of certificate status validation. In this paper, we propose a privacy-preserving blockchain-based certificate status validation scheme called PBCert to solve these two issues. First, we separate the revoked certificates control and storage plane. Only the minimal control information (namely, certificate hashes and related operation block height) is stored in the blockchain and it uses external data stores for the detailed information about all revoked certificates. Second, we design an obscure response to the clients’ certificate status query for the purpose of privacy preserving. Through the security analysis and experiment evaluation, our scheme is significant in practice. |
| first_indexed | 2024-12-19T23:23:26Z |
| format | Article |
| id | doaj.art-87aa4650bfde416f86f02c39568840b8 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-19T23:23:26Z |
| publishDate | 2019-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-87aa4650bfde416f86f02c39568840b82022-12-21T20:01:55ZengIEEEIEEE Access2169-35362019-01-0176117612810.1109/ACCESS.2018.28898988590825PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage ManagementShixiong Yao0https://orcid.org/0000-0001-5013-2077Jing Chen1Kun He2Ruiying Du3Tianqing Zhu4Xin Chen5School of Cyber Science and Engineering, Wuhan University, Wuhan, ChinaSchool of Cyber Science and Engineering, Wuhan University, Wuhan, ChinaSchool of Cyber Science and Engineering, Wuhan University, Wuhan, ChinaSchool of Cyber Science and Engineering, Wuhan University, Wuhan, ChinaSchool of Software, University of Technology Sydney, Ultimo, NSW, AustraliaSchool of Cyber Science and Engineering, Wuhan University, Wuhan, ChinaIn the recent years, the vulnerabilities of conventional public key infrastructure are exposed by the real-world attacks, such as the certificate authority’s single-point-of-failure or clients’ private information leakage. Aimed at the first issue, one type of approach is that multiple entities are introduced to assist the certificate operations, including registration, update, and revocation. However, it is inefficient in computation. Another type is to make the certificate information publicly visible by bringing in the log servers. Nevertheless, the data synchronization among log servers may lead to network latency. Based on the second approach, the blockchain-based public key infrastructure schemes are proposed. Through these type of schemes, all the certificate operations are stored in the blockchain for public audit. However, the issue of revoked certificates’ status storage is worth paying attention, especially in the setting with massive certificates. In addition, the target web server that a client wants to access is exposed in the process of certificate status validation. In this paper, we propose a privacy-preserving blockchain-based certificate status validation scheme called PBCert to solve these two issues. First, we separate the revoked certificates control and storage plane. Only the minimal control information (namely, certificate hashes and related operation block height) is stored in the blockchain and it uses external data stores for the detailed information about all revoked certificates. Second, we design an obscure response to the clients’ certificate status query for the purpose of privacy preserving. Through the security analysis and experiment evaluation, our scheme is significant in practice.https://ieeexplore.ieee.org/document/8590825/Public key infrastructureblockchainrevocation mechanismprivacy-preserving |
| spellingShingle | Shixiong Yao Jing Chen Kun He Ruiying Du Tianqing Zhu Xin Chen PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage Management IEEE Access Public key infrastructure blockchain revocation mechanism privacy-preserving |
| title | PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage Management |
| title_full | PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage Management |
| title_fullStr | PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage Management |
| title_full_unstemmed | PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage Management |
| title_short | PBCert: Privacy-Preserving Blockchain-Based Certificate Status Validation Toward Mass Storage Management |
| title_sort | pbcert privacy preserving blockchain based certificate status validation toward mass storage management |
| topic | Public key infrastructure blockchain revocation mechanism privacy-preserving |
| url | https://ieeexplore.ieee.org/document/8590825/ |
| work_keys_str_mv | AT shixiongyao pbcertprivacypreservingblockchainbasedcertificatestatusvalidationtowardmassstoragemanagement AT jingchen pbcertprivacypreservingblockchainbasedcertificatestatusvalidationtowardmassstoragemanagement AT kunhe pbcertprivacypreservingblockchainbasedcertificatestatusvalidationtowardmassstoragemanagement AT ruiyingdu pbcertprivacypreservingblockchainbasedcertificatestatusvalidationtowardmassstoragemanagement AT tianqingzhu pbcertprivacypreservingblockchainbasedcertificatestatusvalidationtowardmassstoragemanagement AT xinchen pbcertprivacypreservingblockchainbasedcertificatestatusvalidationtowardmassstoragemanagement |