Conference Papers Year : 2017

LOCALPKI: A User-Centric Formally Proven Alternative to PKIX

Abstract

A public-key infrastructure (PKI) binds public keys to identities of entities. Usually, this binding is established through a process of registration and issuance of certificates by a certificate authority (CA) where the validation of the registration is performed by a local registration authority. In this paper, we propose an alternative scheme, called LOCALPKI, where the binding is performed by the local authority and the issuance is left to the end user or to the local authority. The role of our third entity is then to register this binding and to provide up-to-date status information on this registration. The idea is that many more local actors could then take the role of a local authority, thus allowing for an easier spread of public-key certificates in the population. We also prove our scheme's security with Tamarin an automatic verification tool of cryptographic protocols.
Fichier principal
Vignette du fichier
localpki.pdf (205.43 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01564696 , version 1 (19-07-2017)

Identifiers

Cite

Jean-Guillaume Dumas, Pascal Lafourcade, Francis Melemedjian, Jean-Baptiste Orfila, Pascal Thoniel. LOCALPKI: A User-Centric Formally Proven Alternative to PKIX. 14th International Conference on Security and Cryptography SECRYPT, Jul 2017, Madrid, Spain. ⟨10.5220/0006461101870199⟩. ⟨hal-01564696⟩
539 View
410 Download

Altmetric

Share

More