Skip to Main content Skip to Navigation

Définition et conception d'un système optimal de la révocation de certificats

Abstract : The Public Key Infrastructure (PKI) is a public key infrastructure whose objective is to meet needs such as public key authentication, access control and authorization functions. The support for these services determines the attributes contained in, as well as auxiliary control information such as policy and certification path constraints. The validation of the certificate goes through the verification of these attributes. A certificate is supposed to be used throughout its validity period. However, various circumstances may interrupt this validity. These circumstances include a name change, an association change, etc. Under such circumstances, the CA must revoke the certificate. Certificate revocation validation and verification services are expected or necessary in several contexts, we can cite some among many others: vehicular communications, (WWW), user authentication, etc. Vehicle communications are at the center of the vehicles of tomorrow and, more generally, of smart cities. Securing these communications is a critical element given the services in perspective. The security of inter-vehicle exchanges is based on the digital signature. This signature requires a key exchange infrastructure (PKI).RFC 5280 defines different revocation methods. Among these, we have a revocation method, which requires the periodic publication by the CA of a signed data structure called CRL (Certificate revocation list). This approach, which is the most widely used, is mature but expensive in terms of time and volume, and vehicular communications bring new constraints. This work relates to the verification of the revocation of X509 certificates and pseudonym certificates used in vehicular communications. Our goal is to reduce latency due to revocation checking of X509 and pseudonyms certificates. In this context, we have proposed a method of revocation, which implies the publication of the revocation lists in a public Blockchain. We then proposed a revocation method able to face the new constraints introduced by the vehicular environment. Our contributions have been validated by an implementation.
Document type :
Complete list of metadata
Contributor : ABES STAR :  Contact
Submitted on : Monday, August 16, 2021 - 10:48:13 AM
Last modification on : Wednesday, January 26, 2022 - 2:28:16 PM
Long-term archiving on: : Wednesday, November 17, 2021 - 6:25:17 PM


Version validated by the jury (STAR)


  • HAL Id : tel-03320582, version 1


Elloh Yves Christian Adja. Définition et conception d'un système optimal de la révocation de certificats. Cryptographie et sécurité [cs.CR]. Institut Polytechnique de Paris, 2021. Français. ⟨NNT : 2021IPPAT012⟩. ⟨tel-03320582⟩



Record views


Files downloads