ValidCertify: an effective blockchain-based domain certificate authentication and verification scheme
摘要
Certificate verification is a fundamental component of Public Key Infrastructure (PKI), ensuring that digital certificates provided by Certificate Authorities (CAs) are both valid and trustworthy. The process involves authenticating a certificate by tracing it through a "chain of trust, " which ultimately leads to a trusted root CA. A certificate is deemed valid when it successfully chains back to a recognized root authority, allowing users to trust the information provided by the certificate holder. PKI relies on a centralized trust model where CAs are responsible for issuing and managing certificates. If a CA is compromised, attackers can issue fraudulent certificates, enabling them to impersonate legitimate entities or intercept sensitive communications. This breach could disrupt the integrity of the entire trust model, highlighting the risks associated with the centralized nature of PKI systems. As a result, ensuring the security and reliability of the certificate issuance process is crucial to maintaining the overall trustworthiness of digital communications and transactions within PKI frameworks. In this research, the authentication and verification of the certificate using the blockchain-based domain, named the ValidCertify approach, are proposed, which illustrates the reliable and effective method for the certificate authentication of users. The four significant phases of blockchain-based secured domain certificate authentication and verification are user registration, domain authentication, certificate issuance, and token generation. The certificate authority plays a vital role between the domain and the block header, and the new blocks generated during every communication are placed in the block header through blockchain technology. After verifying the domain request for certificate authentication, the certificate authority verifies the security factor of both the validator and the user for acceptance. Compared to the state-of-the-art, the ValidCertify method’s performance, based on the responsiveness, genuine user detection rate, and illegitimate user detection, is better and is 140.064 s, 0.760 s, and 0.500 for the block size 50.