论文标题
基于区块链的分散动态PKI
A Decentralized Dynamic PKI based on Blockchain
论文作者
论文摘要
证书管理局（CA）在传统公共密钥基础设施（PKI）中的核心作用使其脆弱而容易妥协和操作失败。尤其是在松散连接和大型系统中，维护CA和撤销清单的要求。基于日志的PKI已被提议作为一种补救措施，但它们不能有效地解决问题。我们根据区块链和信任模型提供了一个通用模型和解决方案，用于分散和动态的PKI，其中删除了传统的CA和数字证书，而是在区块链上注册了所有内容。公共密钥的注册，撤销和更新是基于已经属于系统一部分的一定数量的实体之间的共识机制。属于系统一部分的任何节点都可以是审核员，并在发现恶意活动后启动撤销过程。不再需要撤销列表，因为任何节点都可以通过证人有效地验证公共钥匙。
The central role of the certificate authority (CA) in traditional public key infrastructure (PKI) makes it fragile and prone to compromises and operational failures. Maintaining CAs and revocation lists is demanding especially in loosely-connected and large systems. Log-based PKIs have been proposed as a remedy but they do not solve the problem effectively. We provide a general model and a solution for decentralized and dynamic PKI based on a blockchain and web of trust model where the traditional CA and digital certificates are removed and instead, everything is registered on the blockchain. Registration, revocation, and update of public keys are based on a consensus mechanism between a certain number of entities that are already part of the system. Any node which is part of the system can be an auditor and initiate the revocation procedure once it finds out malicious activities. Revocation lists are no longer required as any node can efficiently verify the public keys through witnesses.
