Scalable certificate revocation truth distribution and certificate revocation truth verification using a Bloom filter set and false positive result set for PKI-based IoT scenarios

摘要

A first loT device contains a memory, a transceiver, a Bloom filter evaluation module, a module for comparing false positive results and a control module. Memory stores: a Bloom filter set containing an array of bits representing entries in a CRL; and a set of false positives containing a list of certificate entries that have been incorrectly identified as blocked. The transceiver receives a message containing a certificate from a second loT device.whether an identifier associated with the certificate is in the Bloom filter set. The false positive result comparison module receives the false positive result set from the back office station and determines whether the identifier in the false positive result set is. The control module allows communication between the first and the second IoT device based on whether the identifier is in the Bloom filter set and in the set of false positive results.