AuthLedger: A Novel Blockchain-based Domain Name Authentication Scheme

Zhi Guan, Abba Garba, Anran Li, Zhong Chen, Nesrine Kaaniche

2019

Abstract

Nowadays public key infrastructure authentication mainly rely on certificate authorities and have to be trusted by both domain operators and domain owners. Domain Name System Security Extensions (DNSSEC) using DNS-based Authentication Name Entities (DANE) DNS records types, offer additional security for authenticating data and integrity to domain name system (DNS). This method allow client via signed statements to specify which CAs are authorized to represent certificate of a domain. Another method is Certificate Authority Authorizations (CAA) developed by Internet Engineering Task Force (IETF) to provide security guarantee against rogue certificate authorities that offer fake certificate for the domain. However, all of these approaches are prone to single point of failure due to their trust attached to infrastructure like Internet Corporation for Assigned Names and Numbers (ICANN). In order to weaken the level of trust to the CAs over certificates, it is necessary to balance the distribution rights among the entities and improve the control of certificate issuance for the certificate owners. Recently with the emergence of Blockchain, a public and distributed ledger, several applications appeared taking advantage of this powerful technology. In this paper, we present an AuthLedger a domain authentication scheme based on blockchain technology. The proposed scheme is multi-fold. First, we proposed a domain authentication scheme to reduce the level of trust in CAs. second, we implement our system using Ethereum smart contract. Third, we evaluate security and performance of the proposed system.

Paper Citation

in Harvard Style

Guan Z., Garba A., Li A., Chen Z. and Kaaniche N. (2019). AuthLedger: A Novel Blockchain-based Domain Name Authentication Scheme.In Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-359-9, pages 345-352. DOI: 10.5220/0007366803450352

in Bibtex Style

@conference{icissp19,
author={Zhi Guan and Abba Garba and Anran Li and Zhong Chen and Nesrine Kaaniche},
title={AuthLedger: A Novel Blockchain-based Domain Name Authentication Scheme},
booktitle={Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2019},
pages={345-352},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0007366803450352},
isbn={978-989-758-359-9},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - AuthLedger: A Novel Blockchain-based Domain Name Authentication Scheme
SN - 978-989-758-359-9
AU - Guan Z.
AU - Garba A.
AU - Li A.
AU - Chen Z.
AU - Kaaniche N.
PY - 2019
SP - 345
EP - 352
DO - 10.5220/0007366803450352