Internet X.509 Public Key Infrastructure Authority Information Access Certificate Revocation List (CRL) Extension

The technical solutions and organizational procedures used to manage certificates are collectively named Public Key Infrastructure (PKI). The overall goal of a PKI is to provide support for usage of public-key certificates within – and also outside – its constituency. To this aim, several functions are needed, such as user registration, key generation, certificate revocation and many others. It is the aim of this paper to describe issues related to digital certificates and PKIs, both from the technical and management viewpoint.

Download Full-text

On the Certificate Revocation Problem in the Maritime Sector

Secure IT Systems - Lecture Notes in Computer Science ◽

10.1007/978-3-030-70852-8_9 ◽

2021 ◽

pp. 142-157

Author(s):

Guillaume Bour ◽

Karin Bernsmed ◽

Ravishankar Borgaonkar ◽

Per Håkon Meland

Keyword(s):

Communication Technology ◽

Public Key Infrastructure ◽

Public Key ◽

Certificate Revocation ◽

Cyber Threats ◽

Maritime Shipping ◽

Pros And Cons ◽

Over Time

AbstractMaritime shipping is currently undergoing rapid digitalization, but with increasing exposure to cyber threats, there is a need to improve the security of the ship communication technology used during operations across international waters, as well as close to local shores and in ports. To this aid, there are ongoing standardization efforts for an international maritime Public Key Infrastructure, but the inherent properties of limited connectivity and bandwidth make certificate revocation a problematic affair compared to traditional Internet systems. The main contribution of this paper is an analysis of certificate revocation techniques based on how they fulfil fundamental maritime requirements and simulated usage over time. Our results identify CRLs (with Delta CRLs) and CRLite as the two most promising candidates. Finally, we outline the pros and cons with these two different solutions.

Download Full-text

Digital Certificates and Public-Key Infrastructures

Information Security and Ethics ◽

10.4018/978-1-59904-937-3.ch084 ◽

2008 ◽

pp. 1210-1235

Author(s):

Diana Berbecaru ◽

Corrado Derenale ◽

Antonio Lioy

Keyword(s):

Public Key Infrastructure ◽

Public Key ◽

Key Generation ◽

Certificate Revocation ◽

Digital Certificates ◽

Organizational Procedures ◽

Technical Solutions

The technical solutions and organizational procedures used to manage certificates are collectively named Public Key Infrastructure (PKI). The overall goal of a PKI is to provide support for usage of public-key certificates within – and also outside – its constituency. To this aim, several functions are needed, such as user registration, key generation, certificate revocation and many others. It is the aim of this paper to describe issues related to digital certificates and PKIs, both from the technical and management viewpoint.

Download Full-text