Skip to main content
Springer Nature Link
Log in

Internet Web Trust System Based on Smart Contract

  • Conference paper
  • First Online:
Data Science (ICPCSEE 2019)

Part of the book series: Communications in Computer and Information Science ((CCIS,volume 1058))

Abstract

The current Internet web trust system is based on the traditional PKI system, to achieve the purpose of secure communication through the trusted third party. However, with the increase of network nodes, various problems appear in the centralization system of public key infrastructure (PKI). In recent years, in addition to cryptographic problems, attacks against PKI have focused on the single point of failure of certificate authority (CA). Although there are many reasons for a single point of failure, the purpose of the attack is to invalidate the CA. Thus a distributed authentication system is explored to provide a feasible solution to develop distributed PKI with the rise of the blockchain. Due to the automation and economic penalties of smart contracts, a PKI system is proposed based on smart contracts. The certificate chain was constructed in the blockchain, and a mechanism was adopted for auditing access to CA nodes in the blockchain. Experimental results show that security requirements of CA are met in this system.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Is This MITM Attack to Gmail’s SSL?(5). https://productforums.google.com/forum/#!msg/gmail/3J3r2JqFNTw/oHHZLJeed-HMJ. Accessed 20 Mar 2019

  2. http://www.cnbeta.com/articles/tech/220690.htm. Accessed 20 Mar 2019

  3. Ellison, C., Schneier, B.: Ten risks of PKI: What you’re not being told about public key infrastructure. Comput. Secur. J. 16(1), 1–7 (2000)

    Google Scholar 

  4. Nakamoto, S.: Bitcoin: a peer-to-peer electronic cash system. Consulted (2008)

    Google Scholar 

  5. A next-generation smart contract and decentralizedapplication platform (5) (2016). https://github.com/ethereum/wiki/wiki/WhitePaper/784a271b596e7fe4e047a2a585b733d631fcf1d4. Accessed 20 Mar 2019

  6. Matsumoto, S., Reischuk, R.M.: IKP: turning a PKI around with decentralized automated incentives. In: 2017 IEEE Symposium on Security and Privacy (SP), pp. 410–426. IEEE (2017)

    Google Scholar 

  7. Corella, F.: Implementing a PKI on a Blockchain. Pomcor Research inMobile and Web Technology (5). https://pomcor.com/2016/10/25/implementing-a-pki-on-a-blockchain/. Accessed 20 Mar 2019

  8. Fromknecht, C., Velicanu, D., Yakoubov, S.: A decentralized public key infrastructure with identity retention. IACR Cryptology ePrint Archive 2014/803 (2014)

    Google Scholar 

  9. Wikipedia: Namecoin (5). https://en.wikipedia.org/wiki/Namecoin. Accessed 20 Mar 2019

  10. Al-Bassam, M.: SCPKI: a smart contract-based PKI and identity system. In: Proceedings of the ACM Workshop on Blockchain, Cryptocurrencies and Contracts, pp. 35–40. ACM (2017)

    Google Scholar 

  11. Garfinkel, S.: PGP: Pretty Good Privacy. O’Reilly & Associates, Newton (1995)

    MATH  Google Scholar 

  12. https://ethstats.net/. Accessed 20 Mar 2019

  13. https://coinmarketcap.co. 20 Mar 2019

  14. Orman, H.: Blockchain: the emperors new PKI? IEEE Internet Comput. 22(2), 23–28 (2018)

    Article  Google Scholar 

  15. Jiang, W., Li, H., Xu, G., et al.: PTAS: Privacy-preserving Thin-client Authentication Scheme in Blockchain-Based PKI, Future Generation Computer Systems (2019). https://doi.org/10.1016/j.future.2019.01.026

    Article  Google Scholar 

Download references

Acknowledgements

This work is supported by the National Natural Science Foundations of China (grant No. 61802436 and No. 61702550) and the National Key Research and Development Plan (grant No. 2018YFB0803603 and No. 2016YFB0501901).

Author information

Authors and Affiliations

  1. He’nan Province Key Laboratory of Information Security, Zhengzhou, 450001, Henan, China

    Shaozhuo Li, Na Wang, Xuehui Du & Aodi Liu

Authors
  1. Shaozhuo Li
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Na Wang
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Xuehui Du
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Aodi Liu
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Na Wang .

Editor information

Editors and Affiliations

  1. Guilin University of Technology, Guilin, China

    Xiaohui Cheng

  2. Northeast Forestry University, Harbin, China

    Weipeng Jing

  3. Harbin University of Science and Technology, Harbin, China

    Xianhua Song

  4. National Academy of Guo Ding Institute of Data Science, Harbin, China

    Zeguang Lu

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Li, S., Wang, N., Du, X., Liu, A. (2019). Internet Web Trust System Based on Smart Contract. In: Cheng, X., Jing, W., Song, X., Lu, Z. (eds) Data Science. ICPCSEE 2019. Communications in Computer and Information Science, vol 1058. Springer, Singapore. https://doi.org/10.1007/978-981-15-0118-0_23

Download citation

  • DOI: https://doi.org/10.1007/978-981-15-0118-0_23

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-15-0117-3

  • Online ISBN: 978-981-15-0118-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics