Analysis And Research Of Certificate Revocation Schemes Forad Hoc Networks

Due to the inherent features of dynamic topology and no fixed infrastructure, MANET is more vulnerable to a variety of malicious attacks compared to traditional networks. As an important part of certificate management in Ad Hoc Network environment, the certificate revocation plays a vital role in protecting users' information security and the network stability.In this article, we analyze the certificate revocation problems and make our contributions as follows.(1)We design a certification revocation system based on the distributed CA mechanism. The system uses the threshold RSA signature scheme, PKI, master-slaver structure's LDAP certification server system to implement certification revocation, CRL issues, certificate status inquiry and secure communication among nodes in the Ad Hoc environments.(2)To solve the problem of incomprehensive factors in current distributed certificate revocation algorithms in Ad Hoc networks, we present an evaluation algorithm of malicious nodes with reputation value decided by accused factors, accusation factors, compensation and revocation factors. This algorithm considers the influencing factors of reputation value more comprehensively.(3)According to the large consumption of node resources and network resources in certificate revocation, a cluster-based protocol of certificate revocation is proposed, which is the implementation of the malicious node identification algorithm. The one-way hash function is used to satisfy the requirements of the alleged message source authentication. The analysis shows that this protocol may reduce the node-energy cost and network-resource consumption, improve network scalability and thus is more practical in the large-scale Ad Hoc networks.