数字证书的选择性泄漏研究  

Research of digital credentials selective disclosure

作　　者：杨春[1] 曹天杰[1] 张永平[1] 

机构地区：[1]中国矿业大学计算机科学与技术学院,江苏徐州221008

出　　处：《计算机工程与设计》2006年第1期89-91,共3页Computer Engineering and Design

摘　　要：目前X.509v3是广泛使用的数字证书标准,但是依然存在着安全缺陷。基于该标准的现实意义,简单介绍了相关背景知识和存在的缺陷。也分析了已经存在的解决方案,并针对其需要较多存储空间的不足,用Merkle树方法加以改进。同时也分析了Merkle树方案的不足。利用数字证书字段出现的概率,用Huffman树方法做了改进。最后对3种方案做了简单的比较。X. 509v3 is the most wildly used standard of digital credentials in current days. But there still are some security limitations in it. On the base of its important reality significance, the background knowledge of digital credentials and their disadvantage was in- troduced. And the existing solution was analyzed. To fix the drawback of storage space, Merkle tree algorithm was proposed, And the demerit of Merkle tree was also analyzed. Considering the probability of each field in the digital credentials, the Huffman tree algorithm was proposed. At last, 3 methods were simply compared.

关 键 词：数字证书 选择性泄漏 HASH树 MERKLE HASH树 HUFFMAN 树 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]