Next Article in Journal
Privacy Protection Scheme for the Internet of Vehicles Based on Private Set Intersection
Next Article in Special Issue
Physical Visitor Access Control and Authentication Using Blockchain, Smart Contracts and Internet of Things
Previous Article in Journal
Intrusion Detection System for IoT Using Logical Analysis of Data and Information Gain Ratio
Previous Article in Special Issue
Process Authentication through Blockchain: Three Case Studies
 
 
Search for Articles:
Title / Keyword
Author / Affiliation / Email
Journal
Article Type
 
 
Advanced Search
 
Section
Special Issue
Volume
Issue
Number
Page
 
Journals
Cryptography
Volume 6
Issue 4
10.3390/cryptography6040063
cryptography-logo
Submit to this Journal Review for this Journal Propose a Special Issue
► Article Menu

Article Menu

share Share announcement Help format_quote Cite question_answer Discuss in SciProfiles
first_page
settings
Order Article Reprints
Font Type:
Arial Georgia Verdana
Font Size:
Aa Aa Aa
Line Spacing:
Column Width:
Background:
Article

Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation

by
Anant Sujatanagarjuna
1,*,
Arne Bochem
2 and
Benjamin Leiding
1
1
Institute for Software and Systems Engineering, Clausthal University of Technology, 38678 Clausthal-Zellerfeld, Germany
2
Institute of Computer Science, University of Goettingen, 37073 Goettingen, Germany
*
Author to whom correspondence should be addressed.
Cryptography 2022, 6(4), 63; https://doi.org/10.3390/cryptography6040063
Submission received: 21 September 2022 / Revised: 15 November 2022 / Accepted: 30 November 2022 / Published: 6 December 2022
(This article belongs to the Special Issue Emerging Topics in Blockchain Security and Privacy)
Browse Figures
Versions Notes

Abstract

Certificates are integral to the security of today’s Internet. Protocols like BlockVoke allow secure, timely and efficient revocation of certificates that need to be invalidated. ACME, a scheme used by the non-profit Let’s Encrypt Certificate Authority to handle most parts of the certificate lifecycle, allows automatic and seamless certificate issuance. In this work, we bring together both protocols by describing and formalizing an extension of the ACME protocol to support BlockVoke, combining the benefits of ACME’s certificate lifecycle management and BlockVoke’s timely and secure revocations. We then formally verify this extension through formal methods such as Colored Petri Nets (CPNs) and conduct a risk and threat analysis of the ACME/BlockVoke extension using the ISSRM domain model. Identified risks and threats are mitigated to secure our novel extension. Furthermore, a proof-of-concept implementation of the ACME/BlockVoke extension is provided, bridging the gap towards deployment in the real world.
Keywords: colored petri nets; blockchain; certificate revocation; formal verification; security; ACME; risk and threat analysis colored petri nets; blockchain; certificate revocation; formal verification; security; ACME; risk and threat analysis

Share and Cite

MDPI and ACS Style

Sujatanagarjuna, A.; Bochem, A.; Leiding, B. Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation. Cryptography 2022, 6, 63. https://doi.org/10.3390/cryptography6040063

AMA Style

Sujatanagarjuna A, Bochem A, Leiding B. Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation. Cryptography. 2022; 6(4):63. https://doi.org/10.3390/cryptography6040063

Chicago/Turabian Style

Sujatanagarjuna, Anant, Arne Bochem, and Benjamin Leiding. 2022. "Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation" Cryptography 6, no. 4: 63. https://doi.org/10.3390/cryptography6040063

APA Style

Sujatanagarjuna, A., Bochem, A., & Leiding, B. (2022). Formalizing and Safeguarding Blockchain-Based BlockVoke Protocol as an ACME Extension for Fast Certificate Revocation. Cryptography, 6(4), 63. https://doi.org/10.3390/cryptography6040063

Article Metrics

Back to TopTop