Scalable Multi-domain Trust Infrastructures for Segmented Networks

Grierson, Sam; Ghaleb, Baraq; Buchanan, William J; Thomson, Craig; Maglaras, Leandros; Eckl, Chris

Abstract

Within a trust infrastructure, a private key is often used to digitally sign a transaction, which can be verified with an associated public key. Using PKI (Public Key Infrastructure), a trusted entity can produce a digital signature, verifying the authenticity of the public key. However, what happens when external entities are not trusted to verify the public key or in cases where there is no Internet connection within an isolated or autonomously acting collection of devices? For this, a trusted entity can be elected to generate a key pair and then split the private key amongst trusted devices. Each node can then sign part of the transaction using their split of the shared secret. The aggregated signature can then define agreement on a consensus within the infrastructure. Unfortunately, this process has two significant problems. The first is when no trusted node can act as a dealer of the shares. The second is the difficulty of scaling the digital signature scheme. This paper outlines a method of creating a leaderless approach to defining trust domains to overcome weaknesses in the scaling of the elliptic curve digital signature algorithm. Instead, it proposes the usage of the Edwards curve digital signature algorithm for the definition of multiple trust zones. The paper shows that the computational overhead of the distributed key generation phase increases with the number of nodes in the trust domain but that the distributed signing has a relatively constant computational overhead.

Citation

Grierson, S., Ghaleb, B., Buchanan, W. J., Thomson, C., Maglaras, L., & Eckl, C. (2023, November). Scalable Multi-domain Trust Infrastructures for Segmented Networks. Presented at 2023 IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), Edinburgh, UK

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2023 IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD)
• Start Date: Nov 5, 2023
• End Date: Nov 7, 2023
• Acceptance Date: Oct 7, 2023
• Online Publication Date: Mar 27, 2024
• Publication Date: 2023
• Deposit Date: Oct 29, 2023
• Publicly Available Date: Dec 31, 2023
• Publisher: Institute of Electrical and Electronics Engineers
• Peer Reviewed: Peer Reviewed
• Book Title: 2023 IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD)
• ISBN: 9798350303506
• DOI: https://doi.org/10.1109/CAMAD59638.2023.10478427
• Keywords: DKG; ECDSA; EdDSA; Trust infrastructures
• Related Public URLs: https://camad2023.ieee-camad.org/