Method of managing implicit certificates using a distributed public keys infrastructure
AssigneeCommissariat A L'energie Atomique Et Aux Energies Alternatives
InventorOlivier SAVRY
Life of this patent
Estimating the term…
Abstract
A method of managing implicit certificates of an elliptical curve encryption (ECQV). The implicit certificates are stored in different nodes of the network as a function of a distributed hash table (DHT) and not with a single certification authority. The implicit certificate of the public key associated with a node is obtained by chaining elementary certification operations with a sequence of indexing nodes of the network. Chaining of elementary certification operations can reinforce authentication of network nodes.
Claims12
A method of managing implicit certificates of public keys for a communication network, the public keys being related to an elliptic curve cryptosystem, each implicit certificate being unable to identify a public key of a node on the network and each node being identified by an identifier, wherein:
- a first implicit certificate (γA0) of a node A is calculated by and is stored in a first indexing node (B0), the first indexing node being determined by a distributed hash table, starting from an identifier condensate obtained by hashing a first value containing the node identifier A;
- a first public key (QA0) of node A is calculated from the first implicit certificate and the public key of the first indexing node (QB0);
- a second implicit certificate (γAI) of node A is calculated by a second indexing node (BI), the second indexing node being determined by said distributed hash table from a first certificate condensate (eA0) obtained by hashing a second value containing the first implicit certificate and the node identifier A, said second implicit certificate being transmitted to the first indexing node to be stored in it;
- a second public key (QAI) of node A is calculated from the first public key (QA0) and the public key of the second indexing node (QBI).
Dependencies are inferred from the claim text.