An Enhanced Online Certificate Status Protocol for Public Key Infrastructure with Smart Grid and Energy Storage System

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Huang, Hong-Sheng, Chuang, Cheng-Che, Shih, Jhih-Zen, Chen, Hsuan-Tung, Sun, Hung-Min
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866916502104440832
author Huang, Hong-Sheng
Chuang, Cheng-Che
Shih, Jhih-Zen
Chen, Hsuan-Tung
Sun, Hung-Min
author_facet Huang, Hong-Sheng
Chuang, Cheng-Che
Shih, Jhih-Zen
Chen, Hsuan-Tung
Sun, Hung-Min
contents The efficiency of checking certificate status is one of the key indicators in the public key infrastructure (PKI). This prompted researchers to design the Online Certificate Status Protocol (OCSP) standard, defined in RFC 6960, to guide developers in implementing OCSP components. However, as the environment increasingly relies on PKI for identity authentication, it is essential to protect the communication between clients and servers from rogue elements. This can be achieved by using SSL/TLS techniques to establish a secure channel, allowing Certificate Authorities (CAs) to safely transfer certificate status information. In this work, we introduce the OCSP Stapling approach to optimize OCSP query costs in our smart grid environment. This approach reduces the number of queries from the Device Language Message Specification (DLMS) server to the OCSP server. Our experimental results show that OCSP stapling increases both efficiency and security, creating a more robust architecture for the smart grid.
format Preprint
id arxiv_https___arxiv_org_abs_2409_10929
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle An Enhanced Online Certificate Status Protocol for Public Key Infrastructure with Smart Grid and Energy Storage System
Huang, Hong-Sheng
Chuang, Cheng-Che
Shih, Jhih-Zen
Chen, Hsuan-Tung
Sun, Hung-Min
Cryptography and Security
The efficiency of checking certificate status is one of the key indicators in the public key infrastructure (PKI). This prompted researchers to design the Online Certificate Status Protocol (OCSP) standard, defined in RFC 6960, to guide developers in implementing OCSP components. However, as the environment increasingly relies on PKI for identity authentication, it is essential to protect the communication between clients and servers from rogue elements. This can be achieved by using SSL/TLS techniques to establish a secure channel, allowing Certificate Authorities (CAs) to safely transfer certificate status information. In this work, we introduce the OCSP Stapling approach to optimize OCSP query costs in our smart grid environment. This approach reduces the number of queries from the Device Language Message Specification (DLMS) server to the OCSP server. Our experimental results show that OCSP stapling increases both efficiency and security, creating a more robust architecture for the smart grid.
title An Enhanced Online Certificate Status Protocol for Public Key Infrastructure with Smart Grid and Energy Storage System
topic Cryptography and Security
url https://arxiv.org/abs/2409.10929