[工程科技]Use of Nested Certificates for Efficient_ Dynamic and Trust Preserving Public Key Infrastru.pdf

Use of Nested Certificates for Efficient, Dynamic and Trust Preserving Public Key Infrastructure Albert Levi Sabanci University, Faculty of Engineering and Natural Sciences, Tuzla, Istanbul 34956, Turkey levi@ M. Ufuk Çağlayan Bogazici University, Department of Computer Engineering, Bebek, Istanbul 80815, Turkey caglayan@.tr Çetin K. Koç Oregon State University, Electrical and Computer Engineering Department, Corvallis, Oregon 97331, USA koc@ Abstract Certification is a common mechanism for authentic public key distribution. In order to obtain a public key, verifiers need to extract a certificate path from a network of certificates, which is called Public Key Infrastructure (PKI), and verify the certificates on this path recursively. This is the classical methodology. Nested certification is a novel methodology for efficient certificate path verification. Basic idea is to issue special certificates – called nested certificates – for other certificates. Nested certificates can be used together with classical certificates in Public Key Infrastructures (PKIs). Such a PKI, which is called Nested certificate based PKI (NPKI), is proposed in this paper as an alternative to classical PKI. The concept of “certificates for other certificates” results in nested certificate paths in which the first certificate is