TU Darmstadt / ULB / TUbiblio

Uma ICP baseada em certificados digitais autoassinados

Moecke, Cristian Thiago and Custódio, Ricardo Felipe and Kohler, Jonathan and Carlos, Marcelo Carlomagno (2010):
Uma ICP baseada em certificados digitais autoassinados.
In: X Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais, pp. 91-104, [Conference or Workshop Item]

Abstract

Public Key Infrastructures have been used in some scenarios were there is a need to stabilish trust between two entities. Specially, its use is common in the stabilishment of trust to access the so called “secure websites” using SSL/TLS. However, with new iniciatives like ICP-Brasil (Brazilian PKI) and the growing use of digital certification to sign eletronic documents, some limitations of PKI have become more clear. This paper discusses the inversion of some concepts of Public Key Infrastructures (PKI) to simplify the process of digital signature validation. Changing the form that the user certificate is issued and modifying the responsibilities of a Certification Authorities by creating a Validation Authority, that also replaces the main function of Time Stamping Authority on digital signatures, we can reduce the effort spent on the process of digital signature validation. We also propose a simple protocol to interact with the Validation Authority. 

Item Type: Conference or Workshop Item
Erschienen: 2010
Creators: Moecke, Cristian Thiago and Custódio, Ricardo Felipe and Kohler, Jonathan and Carlos, Marcelo Carlomagno
Title: Uma ICP baseada em certificados digitais autoassinados
Language: German
Abstract:

Public Key Infrastructures have been used in some scenarios were there is a need to stabilish trust between two entities. Specially, its use is common in the stabilishment of trust to access the so called “secure websites” using SSL/TLS. However, with new iniciatives like ICP-Brasil (Brazilian PKI) and the growing use of digital certification to sign eletronic documents, some limitations of PKI have become more clear. This paper discusses the inversion of some concepts of Public Key Infrastructures (PKI) to simplify the process of digital signature validation. Changing the form that the user certificate is issued and modifying the responsibilities of a Certification Authorities by creating a Validation Authority, that also replaces the main function of Time Stamping Authority on digital signatures, we can reduce the effort spent on the process of digital signature validation. We also propose a simple protocol to interact with the Validation Authority. 

Title of Book: X Simpósio Brasileiro em Segurança da Informação e de Sistemas Computacionais
Uncontrolled Keywords: Security, Usability and Society;Secure Data
Divisions: 20 Department of Computer Science > SECUSO - Security, Usability and Society
LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
LOEWE > LOEWE-Zentren
20 Department of Computer Science
LOEWE
Date Deposited: 28 Jul 2016 18:35
Identification Number: TUD-CS-2010-23850
Export:
Suche nach Titel in: TUfind oder in Google
Send an inquiry Send an inquiry

Options (only for editors)

View Item View Item