Improving PGP Web of Trust through the Expansion of Trusted Neighborhood

摘要

PGP Web of Trust where users can sign digital signatures on public key certificates of other users has been successfully applied in securing emails and files transmitted over the Internet. However, its rigorous restrictions on utilizable trust relationships and acceptable signatures limit its performance. In this paper, we first make some modification and extension to PGP Web of Trust by relaxing those constraints. In addition, we propose a novel method to further expand trusted neighborhood of users by merging the signatures of the trusted neighbors and finding the similar users based on the merged signature set. Confirmed by the experiments carried out in different simulated real-life scenarios, our method applied to both the modified and extended PGP methods can improve their performance. With the expansion of trusted neighborhood, the performance of the original PGP Web of Trust is also improved considerably.