Incorporating revocation of certification into a PKI model

Public key infrastructures (PKIs) are complex distributed systems that are responsible for giving users enough information to make reasonable trust judgments about one another. PKI is a prerequisite for security in distributed systems and for electronic commerce. The validation of public keys is hen...

Full description

Bibliographic Details
Main Authors: Azimzadeh, Fatemeh, Khatun, Sabira, Mohd Ali, Borhanuddin, Kargar, Mohammad J.
Format: Conference or Workshop Item
Language:English
Published: IEEE 2007
Online Access:http://psasir.upm.edu.my/id/eprint/48059/
http://psasir.upm.edu.my/id/eprint/48059/1/Incorporating%20revocation%20of%20certification%20into%20a%20PKI%20model.pdf
_version_ 1848850977511178240
author Azimzadeh, Fatemeh
Khatun, Sabira
Mohd Ali, Borhanuddin
Kargar, Mohammad J.
author_facet Azimzadeh, Fatemeh
Khatun, Sabira
Mohd Ali, Borhanuddin
Kargar, Mohammad J.
author_sort Azimzadeh, Fatemeh
building UPM Institutional Repository
collection Online Access
description Public key infrastructures (PKIs) are complex distributed systems that are responsible for giving users enough information to make reasonable trust judgments about one another. PKI is a prerequisite for security in distributed systems and for electronic commerce. The validation of public keys is hence of paramount importance. This is achieved by public-key certificates. Several researches have done to evaluate the confidence afforded; one of them is Maurer's model. The problem of assigning and evaluating confidence values numerically (Maurer model) is non-trivial, in particular when certification paths intersect. A restriction in this model is that certificate revocation is not included, but usually revocation happens. While Maurer consider only positive evidence, in this paper has been considered negative evidence as well as revocation. Moreover a few of authors incorporate negative values in inference rules on deterministic part. In this paper we have used a tailored form of that and consider revocation on inference rules. After that negative evidence to exert in probabilistic part, with to take in to a suitable value for this evidence omits the path of trust include the revoked certification.
first_indexed 2025-11-15T10:14:52Z
format Conference or Workshop Item
id upm-48059
institution Universiti Putra Malaysia
institution_category Local University
language English
last_indexed 2025-11-15T10:14:52Z
publishDate 2007
publisher IEEE
recordtype eprints
repository_type Digital Repository
spelling upm-480592016-08-03T07:40:32Z http://psasir.upm.edu.my/id/eprint/48059/ Incorporating revocation of certification into a PKI model Azimzadeh, Fatemeh Khatun, Sabira Mohd Ali, Borhanuddin Kargar, Mohammad J. Public key infrastructures (PKIs) are complex distributed systems that are responsible for giving users enough information to make reasonable trust judgments about one another. PKI is a prerequisite for security in distributed systems and for electronic commerce. The validation of public keys is hence of paramount importance. This is achieved by public-key certificates. Several researches have done to evaluate the confidence afforded; one of them is Maurer's model. The problem of assigning and evaluating confidence values numerically (Maurer model) is non-trivial, in particular when certification paths intersect. A restriction in this model is that certificate revocation is not included, but usually revocation happens. While Maurer consider only positive evidence, in this paper has been considered negative evidence as well as revocation. Moreover a few of authors incorporate negative values in inference rules on deterministic part. In this paper we have used a tailored form of that and consider revocation on inference rules. After that negative evidence to exert in probabilistic part, with to take in to a suitable value for this evidence omits the path of trust include the revoked certification. IEEE 2007 Conference or Workshop Item PeerReviewed application/pdf en http://psasir.upm.edu.my/id/eprint/48059/1/Incorporating%20revocation%20of%20certification%20into%20a%20PKI%20model.pdf Azimzadeh, Fatemeh and Khatun, Sabira and Mohd Ali, Borhanuddin and Kargar, Mohammad J. (2007) Incorporating revocation of certification into a PKI model. In: IEEE International Conference on Telecommunications and Malaysia International Conference on Communications (ICT-MICC 2007), 14-17 May 2007, Penang, Malaysia. (pp. 770-775). 10.1109/ICTMICC.2007.4448592
spellingShingle Azimzadeh, Fatemeh
Khatun, Sabira
Mohd Ali, Borhanuddin
Kargar, Mohammad J.
Incorporating revocation of certification into a PKI model
title Incorporating revocation of certification into a PKI model
title_full Incorporating revocation of certification into a PKI model
title_fullStr Incorporating revocation of certification into a PKI model
title_full_unstemmed Incorporating revocation of certification into a PKI model
title_short Incorporating revocation of certification into a PKI model
title_sort incorporating revocation of certification into a pki model
url http://psasir.upm.edu.my/id/eprint/48059/
http://psasir.upm.edu.my/id/eprint/48059/
http://psasir.upm.edu.my/id/eprint/48059/1/Incorporating%20revocation%20of%20certification%20into%20a%20PKI%20model.pdf