A certificate revocation scheme for wireless ad hoc networks

ABSTRACT

The increasing prominence of wireless ad hoc networks is stimulating greater interest in developing adequate security mechanisms for securing applications involving these innovative networks paradigms. To-date, the proposed security schemes either provide inadequate security or they are too costly computationally, and therefore impractical for most ad hoc network applications.Adapting wired network security schemes---particularly those involved digital certificates---to wireless ad hoc networks environments, poses many difficulties, primarily for two reasons: the limitation of computational resources, and the absence of centralized entities for performing critical key management tasks such as certificate revocation.In this paper, we propose a certificate revocation scheme for wireless ad hoc networks. Our revocation scheme not only provides a measure of protection against malicious accusation attacks, but it also effectively eliminates the window of opportunity whereby revoked certificates can be used to access network services.

REFERENCES

• 1: W. A. Arbaugh. An inductive chosen plaintext attack against wep/wep2. IEEE Document 803.11-01/230, May 2001.
• 2: W. A. Arbaugh, N. Shankar, and Y. J. Wan. Your 802.11 wireless network has no clothes. In Proceedings of IEEE International Conference on Wireless LANs and Home Network, December 2001.
• 3: Nikita Borisov , Ian Goldberg , David Wagner, Intercepting mobile communications: the insecurity of 802.11, Proceedings of the 7th annual international conference on Mobile computing and networking, p.180-189, July 2001, Rome, Italy [doi>10.1145/381677.381695]
• 4: C. Candolin and H. Kari. A security architecture for wireless ad hoc networks. In Proceedings of IEEE Milcom 2002, October 2002.
• 5: B. Chor, S. Goldwasse, S. Micali, and B. Awerbuch. Verifiable secret sharing and achieving simultaneity in the presence of faults. In Proceedings of 26th IEEE Annual Symposium on the Foundations of Computer Science (FOCS), pages 383--395, October 1985.
• 6: B. H. Davies and T. R. Davies. The application of packet switching techniques to combat net radio. Proceedings of the IEEE, 75(1):43--55, January 1987.
• 7: Carlton R. Davis, Ipsec: Securing Vpns, McGraw-Hill Professional, 2001
• 8: A. Ephremides, J. Wieselthier, and D. Baker. A design concept for reliable mobile radio networks with frequency hopping signaling. Proceedings of the IEEE, 75(1):56--73, January 1987.
• 9: P. Feldman. A practical scheme for non-interactive verifiable secret sharing. In Proceedings of 28th IEEE Symposium on Foundations of Foundations of Computer Science, pages 427--437, October 1987.
• 10: Pesech Feldman , Silvio Micali, An Optimal Probabilistic Protocol for Synchronous Byzantine Agreement, SIAM Journal on Computing, v.26 n.4, p.873-933, Aug. 1997 [doi>10.1137/S0097539790187084]
• 11: W. C. Fifer and F. J. Bruno. The low-cost packet radio. Proceedings of the IEEE, 75(1):33--42, January 1987.
• 12: J. Fischer, J. Cafarella, C. Bouman, G. Flynn, V. Dolat, and R. Boisvert. Wideband packet radio technology. Proceedings of the IEEE, 75(1):100--115, January 1987.
• 13: I. S. for Wireless LAN. Ieee std 802.11b--1999, 1999.
• 14: R. Gennaro, S. Jarecki, H. Krawczyk, and T. Rabin. Robust threshold dss signatures. In Proceedings of Eurocrypt '96 LNCS, volume 1070, pages 354--371. Springer-Verlag, May 1996.
• 15: Amir Herzberg , Stanislaw Jarecki , Hugo Krawczyk , Moti Yung, Proactive Secret Sharing Or: How to Cope With Perpetual Leakage, Proceedings of the 15th Annual International Cryptology Conference on Advances in Cryptology, p.339-352, August 27-31, 1995
• 16: R. Housley, W. Polk, W. Ford, and D. Solo. Internet x.509 public key infrastructure certificate and certificate revocation list (crl) profile. Internet Request for Comments (RFC 3280), April 2002.
• 17: Jean-Pierre Hubaux , Levente Buttyán , Srdan Capkun, The quest for security in mobile ad hoc networks, Proceedings of the 2nd ACM international symposium on Mobile ad hoc networking & computing, October 04-05, 2001, Long Beach, CA, USA [doi>10.1145/501436.501437]
• 18: J. Jubin and J. D. Tornow. The darpa packet radio network protocols. Proceedings of the IEEE, 75(1):21--32, January 1987.
• 19: J. Kong, H. Luo, K. Xu, D. L. Gu, M. Gerla, and S. Lu. Adaptive security for multi-layer ad-hoc networks. In Special Issue of Wireless Communications and Mobile Computing. Wiley Interscience Press, August 2002.
• 20: Providing Robust and Ubiquitous Security Support for Mobile Ad Hoc Networks, Proceedings of the Ninth International Conference on Network Protocols, p.251, November 11-14, 2001
• 21: B. M. Leiner, D. L. Nielson, and F. A. Tobagi. Issues in packet radio network design. Proceedings of the IEEE, 75(1):6--20, January 1987.
• 22: Haiyun Luo , Petros Zerfos , Jiejun Kong , Songwu Lu , Lixia Zhang, Self-Securing Ad Hoc Wireless Networks, Proceedings of the Seventh International Symposium on Computers and Communications (ISCC'02), p.567, July 01-04, 2002
• 23: M. Myers, R. Ankney, A. Malpani, S. Galperin, and C. Adams. X.509 internet public key infrastructure online certificate status protocol - ocsp. Internet Request for Comments (RFC 2560), June 1999.
• 24: Torben P. Pedersen, Non-Interactive and Information-Theoretic Secure Verifiable Secret Sharing, Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology, p.129-140, August 11-15, 1991
• 25: T. P. Pedersen. A threshold cryptosystem without a trusted party. In Proceedings of Eurocrypt '91 LNCS, volume 547, pages 522--526. Springer-Verlag, April 1991.
• 26: N. Schacham and J. Westcott. Future directions in packet radio architectures and protocols. Proceedings of the IEEE, 75(1):83--99, January 1987.
• 27: Adi Shamir, How to share a secret, Communications of the ACM, v.22 n.11, p.612-613, Nov. 1979 [doi>10.1145/359168.359176]
• 28: V. Shoup. Practical threshold signatures. In Proceedings of Eurocrypt 2000 LNCS, volume 1807, pages 207--220. Springer-Verlag, May 2000.
• 29: F. A. Tobagi. Modeling and performance analysis of multihop packet radio networks. Proceedings of the IEEE, 75(1):135--155, January 1987.
• 30: L. Venkatraman and D. P. Agrawal. A novel authentication scheme for ad hoc networks. In Proceedings of IEEE Wireless Communications and Networking Conference (WCNC), volume 3, pages 1268--1273, 2000.
• 31: L. Zhou and Z. J. Haas. Securing ad hoc networks. IEEE Network Magazine, 13(6):24--30, November/December 1999.
• 32: Philip R. Zimmermann, The official PGP user's guide, MIT Press, Cambridge, MA, 1995

INDEX TERMS

Keywords:
ad hoc network security, digital signature, public-key cryptography, revocation scheme