Cecoin: A decentralized PKI mitigating MitM attacks
Cecoin: A decentralized PKI mitigating MitM attacks
复制标题
Cecoin：一种分散式 PKI，可减轻 MitM 攻击
DOI：
10.1016/j.future.2017.08.025
复制
发表时间：
2020-06-01
影响因子：
7.5
通讯作者：
Shi, Wenchang
中科院分区：
文献类型：
--
作者：
Qin, Bo;Huang, Jikun;Shi, Wenchang
对于许多应用，可靠地将公钥与其所有者链接是至关重要的。目前的解决方案是使用以可信证书颁发机构(CA)为代表的众所周知的公钥基础设施(PKI)来完成这一分配，在验证其所有者之后为公钥签署证书。然而，由于集中式体系结构，它带来了单点故障问题和不可预测的威胁。本文从比特币的不可逆不可伪造性和公开可验证性出发，提出了一种分布式证书方案，称为Cecoin。在Cecoin中，证书可以被视为货币并记录在区块链上，这消除了单点故障问题。挖掘器可以遵循一套规则来验证证书的有效性，以确保所有权一致性，并允许一个身份绑定多个公钥证书。为了有效地检索和验证证书，以及快速操作，我们结合了改进的Merkle Patricia树，并使用它来实现一个分布式证书库。为了允许所有者转移身份的占有权，我们设计了一个没有可信第三方的在线公平交易协议。安全性和效率分析表明，我们的Cecoin提供了强大的安全性和理想的效率。(C)2017年，由爱思唯尔出版。
For numerous applications, it is essential to reliably link a public key with its owner. The current solution is to employ the well-known Public Key Infrastructure (PKI), represented by a trusted certificate authority (CA), to fulfill this assignment by signing the certificate for the public key after validating its owner. However, due to the centralized architecture, it raises the single-point failure problem with unpredictable threats. In this paper, we present a distributed certificate scheme, referred to as Cecoin which is inspired by the well-known Bitcoin by employing its irreversible unforgeability and public verifiability. In Cecoin, the certificates can be treated as currencies and recorded on block chain, which removes the single point failure problem. The miners can verify the validity of certificates following a set of rules to ensure ownership consistency, and allow an identity to bind multiple public-key certificates. For efficient retrieval and verification of certificates, and quick operations, we incorporate the modified Merkle Patricia tree and employ it to implement a distributed Certificate Library. To allow the owner to transfer the possession of identity, we design an online fair exchange protocol without a trusted third party. Security and efficiency analyses show that our Cecoin provides strong security with desirable efficiency. (c) 2017 Published by Elsevier B.V.