Validation Algorithms for a Secure Internet Routing PKI

  • David Montana
  • Mark Reynolds
Part of the Lecture Notes in Computer Science book series (LNCS, volume 5057)

Abstract

A PKI in support of secure Internet routing was first proposed in [1] and refined in later papers, e.g., [2]. In this “Resource” PKI (RPKI) the resources managed are IP address allocations and Autonomous System number assignments. In a typical PKI the validation problem for each relying party is fairly simple in principle, and is well defined in the standards, e.g. RFC 3280 [3]. The RPKI presents a very different challenge for relying parties with regard to efficient certificate validation. In the RPKI every relying party needs to validate every certificate at fairly frequent intervals (e.g., daily). In addition, certificates on the validation path may be acquired from multiple repositories in an arbitrary order. These dramatic differences motivated us to develop performance-optimized validation algorithms for the RPKI. This paper describes the software developed by BBN for the RPKI, with a special focus on this optimized validation approach.

Keywords

Border Gateway Protocol Resource PKI Internet Routing PKI Route Origination Attestation 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2008

Authors and Affiliations

  • David Montana
    • 1
  • Mark Reynolds
    • 1
  1. 1.BBN TechnologiesCambridgeUSA

Personalised recommendations