A Blockchain-based Method for Decentralizing the ACME Protocol to Enhance Trust in PKI
A Blockchain-based Method for Decentralizing the ACME Protocol to Enhance Trust in PKI
复制标题
DOI：
10.1109/tsp49548.2020.9163555
复制
发表时间：
2020-07
期刊：
影响因子：
--
通讯作者：
Elie F. Kfoury;David J. Khoury;Ali AlSabeh;Jose Gomez;J. Crichigno;E. Bou-Harb
中科院分区：
文献类型：
--
作者：
Elie F. Kfoury;David J. Khoury;Ali AlSabeh;Jose Gomez;J. Crichigno;E. Bou-Harb
区块链技术是数字信任和系统去中心化的基石。在计算系统中消除信任的必要性促使研究人员开始研究区块链在去中心化传统安全模型中的适用性。具体来说，研究人员一直致力于减少众所周知的公钥基础设施（PKI）模型中的信任，该模型目前需要一个受信任的证书颁发机构（CA）来签署数字证书。最近，自动化证书管理环境（Automated Certificate Management Environment， ACME）被标准化为证书颁发自动化协议。它支持在服务器上自动请求、验证和安装证书，从而最大限度地减少了人工交互。ACME只解决了自动化问题，但信任问题仍然存在，因为需要一个受信任的CA。在本文中，我们提出通过使用区块链技术来分散ACME协议，以增强现有PKI模型的当前信任问题，并消除对可信CA的需求。该系统在以太坊区块链上实现和测试，结果表明该系统在成本，速度和适用性方面是可行的，包括物联网（IoT）设备。
Blockchain technology is the cornerstone of digital trust and systems’ decentralization. The necessity of eliminating trust in computing systems has triggered researchers to investigate the applicability of Blockchain to decentralize the conventional security models. Specifically, researchers continuously aim at minimizing trust in the well-known Public Key Infrastructure (PKI) model which currently requires a trusted Certificate Authority (CA) to sign digital certificates. Recently, the Automated Certificate Management Environment (ACME) was standardized as a certificate issuance automation protocol. It minimizes the human interaction by enabling certificates to be automatically requested, verified, and installed on servers. ACME only solved the automation issue, but the trust concerns remain as a trusted CA is required. In this paper we propose decentralizing the ACME protocol by using the Blockchain technology to enhance the current trust issues of the existing PKI model and to eliminate the need for a trusted CA. The system was implemented and tested on Ethereum Blockchain, and the results showed that the system is feasible in terms of cost, speed, and applicability on a wide range of devices including Internet of Things (IoT) devices.