On the Distribution of Revocation Information in Ad Hoc Networks

This paper proposes a simple, scalable and robust scheme for the distribution of revocation information in mobile ad hoc networks (MANETs); the MRL scheme. A MRL is a revocation list for a specific MANET instantiation. The scheme is designed for revocation of keys used to protect the ad hoc network service, and the MRLs are distributed with the routing messages. MRLs are established with the aid of trusted gateways reporting MANET nodes to a central trusted entity. The trusted gateways must be able to detect which nodes are in the MANET. This comes intrinsically with proactive ad hoc routing protocols, and may be achieved at some additional cost with reactive protocols. The scheme is intended for ad hoc networks with a planned origin, and where a common point of trust exists.