Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate Authorities

Fog computing is a complementary paradigm to cloud computing. It aims to improve the performance of Internet of Things (IoT) applications by positioning fog computing nodes closer to IoT networks. Establishing trust between fog nodes and cloud service providers is challenging because fog providers a...

Full description

Saved in:
Bibliographic Details
Main Authors: Shuaib Anath, Tahmid Quazi, Bashan Naidoo
Format: Article
Language:English
Published: IEEE 2025-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/10840179/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832590318443167744
author Shuaib Anath
Tahmid Quazi
Bashan Naidoo
author_facet Shuaib Anath
Tahmid Quazi
Bashan Naidoo
author_sort Shuaib Anath
collection DOAJ
description Fog computing is a complementary paradigm to cloud computing. It aims to improve the performance of Internet of Things (IoT) applications by positioning fog computing nodes closer to IoT networks. Establishing trust between fog nodes and cloud service providers is challenging because fog providers are typically third parties. The automated Fog Node Audit and Certification (FoNAC) scheme is a solution for establishing cloud trust in fog nodes. A key component for fog node trust establishment in the scheme is the attestation key certificate issued by an attestation Certificate Authority (CA). The FoNAC scheme assumes that the attestation CA certification service is readily available. However, this is a strong assumption that requires further study. Therefore, this paper aims to investigate the service availability of the attestation CA in the FoNAC scheme. This study examines the CA service availability in the FoNAC scheme, revealing that a single centralized attestation CA leads to a single point of failure that disables FoNAC and causes service bottlenecks. This paper proposes a distributed multiple attestation CA system to overcome these limitations. The certification service availability of the system is investigated as a finite-queue queuing system. Results demonstrate that increasing the number of CAs significantly increases service availability, achieving 93% availability with three CAs versus 42% with one CA at 500 requests per second. The distributed nature of the proposed system overcomes the limitation of a single point of failure, and the results show that multiple CAs increase the availability of the certification service, thereby reducing bottlenecks.
format Article
id doaj-art-3aca079656774e46a8ebc69f9dfb6265
institution Kabale University
issn 2169-3536
language English
publishDate 2025-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj-art-3aca079656774e46a8ebc69f9dfb62652025-01-24T00:02:02ZengIEEEIEEE Access2169-35362025-01-0113112041121610.1109/ACCESS.2025.352970210840179Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate AuthoritiesShuaib Anath0https://orcid.org/0009-0004-8403-3885Tahmid Quazi1https://orcid.org/0000-0002-1288-4224Bashan Naidoo2https://orcid.org/0000-0001-5553-8199School of Engineering, University of KwaZulu-Natal, Durban, KwaZulu-Natal, South AfricaSchool of Engineering, University of KwaZulu-Natal, Durban, KwaZulu-Natal, South AfricaSchool of Engineering, University of KwaZulu-Natal, Durban, KwaZulu-Natal, South AfricaFog computing is a complementary paradigm to cloud computing. It aims to improve the performance of Internet of Things (IoT) applications by positioning fog computing nodes closer to IoT networks. Establishing trust between fog nodes and cloud service providers is challenging because fog providers are typically third parties. The automated Fog Node Audit and Certification (FoNAC) scheme is a solution for establishing cloud trust in fog nodes. A key component for fog node trust establishment in the scheme is the attestation key certificate issued by an attestation Certificate Authority (CA). The FoNAC scheme assumes that the attestation CA certification service is readily available. However, this is a strong assumption that requires further study. Therefore, this paper aims to investigate the service availability of the attestation CA in the FoNAC scheme. This study examines the CA service availability in the FoNAC scheme, revealing that a single centralized attestation CA leads to a single point of failure that disables FoNAC and causes service bottlenecks. This paper proposes a distributed multiple attestation CA system to overcome these limitations. The certification service availability of the system is investigated as a finite-queue queuing system. Results demonstrate that increasing the number of CAs significantly increases service availability, achieving 93% availability with three CAs versus 42% with one CA at 500 requests per second. The distributed nature of the proposed system overcomes the limitation of a single point of failure, and the results show that multiple CAs increase the availability of the certification service, thereby reducing bottlenecks.https://ieeexplore.ieee.org/document/10840179/Attestationattestation keyavailabilitycertificatecertificationcertification authority
spellingShingle Shuaib Anath
Tahmid Quazi
Bashan Naidoo
Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate Authorities
IEEE Access
Attestation
attestation key
availability
certificate
certification
certification authority
title Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate Authorities
title_full Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate Authorities
title_fullStr Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate Authorities
title_full_unstemmed Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate Authorities
title_short Automated Fog Node Audit and Certification Scheme With Multiple Attestation Certificate Authorities
title_sort automated fog node audit and certification scheme with multiple attestation certificate authorities
topic Attestation
attestation key
availability
certificate
certification
certification authority
url https://ieeexplore.ieee.org/document/10840179/
work_keys_str_mv AT shuaibanath automatedfognodeauditandcertificationschemewithmultipleattestationcertificateauthorities
AT tahmidquazi automatedfognodeauditandcertificationschemewithmultipleattestationcertificateauthorities
AT bashannaidoo automatedfognodeauditandcertificationschemewithmultipleattestationcertificateauthorities