title: Distributed certification application via a trusted dealer.
abstract: Distributed certification via threshold cryptography is much more secure than other ways to protect certification authority (CA)'s private key, and can tolerate some intrusions. As the original system such as ITTC, etc., is unsafe, inefficient and impractical in actual network environment, this paper brings up a new distributed certification scheme, which although it generates key shares concentratively, it updates key shares distributedly, and so, avoids single-point failure like ITTC. It not only enhances robustness with Feldman verification and SSL protocol, but can also change the threshold (t, k) flexibly and robustly, and so, is much more practical. In this work, the authors implement the prototype system of the new scheme and test and analyze its performance.
authors.affiliation: Department of Computer, Zhejiang University, Hangzhou 310027, China. ldy_zj@hotmail.com
authors.forename: Duan-yang
authors.initials: DY
authors.lastname: Liu
authors.forename: Xue-zeng
authors.initials: XZ
authors.lastname: Pan
authors.forename: Ling-di
authors.initials: LD
authors.lastname: Ping
mesh_terms: D000465:Algorithms; D016494:Computer Security; D003199:Computer Systems; D007256:Information Systems; D008962:Models, Theoretical; D012984:Software