Veritaa: A distributed public key infrastructure with signature store. Issue 2 (6th September 2021)

• Record Type: Journal Article
• Authors: Schaerer, Jakob; Zumbrunn, Severin; Braun, Torsten
• Is Part Of: International journal of network management. Volume 32:Issue 2(2022)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2021-09-06
• Subjects: Computer networks -- Management -- Periodicals; 004.6
• DOI: 10.1002/nem.2183
• Languages: English
• ISSNs: 1055-7148

Abstract

Summary: Today, the integrity and authenticity of digital documents and data are often hard to verify. Existing public key infrastructures (PKIs) are capable of certifying digital identities but do not provide solutions to store signatures immutably, and the process of certification is often not transparent. We propose Veritaa, a distributed public key infrastructure with an integrated signature store (DPKISS). The central part of Veritaa is the Graph of Trust that manages identity claims and singed declarations between identity claims and document identifiers. An application‐specific distributed ledger is used to store the transactions that form the Graph of Trust immutably. For the distributed certification of identity claims, a reputation system based on signed trust declarations and domain vetting is used. In this work, we have designed and implemented the proposed architecture of Veritaa, created a testbed, and performed several experiments. The experiments show the benefits and the high performance of Veritaa. Abstract : Veritaa is a Distributed Public Key Infrastructure with an immutable Signature Store. In veritaa, the Graph of Trust represents identity claims, document identifiers, and their signed relations. These signed relations are used for the distributed certification of identity claims and to validate the integrity and authenticity of digital data. The Graph of Trust is stored on an application‐specific distributed ledger to assert immutability and non‐repudiability.