在线CA的安全增强方案研究  

Study on Security-enhanced Scheme of Online CA

作　　者：伍忠东[1] 喻建平[2] 谢维信[2] 白银姬[2] 

机构地区：[1]西安电子科技大学电子工程学院,西安710071 [2]深圳大学信息工程学院,深圳518060

出　　处：《计算机工程》2006年第11期34-36,共3页Computer Engineering

基　　金：国家"863"计划基金资助项目(2003AA142060);广东省自然科学基金重点资助项目(04106250)

摘　　要：结合椭圆曲线密码体制、门限密码技术和主动秘密共享方案,提出一种基于椭圆曲线可验证门限数字签名的在线CA安全增强方案。该方案将在线CA的签名私钥分发给多个CA共享服务器,并保证任何少于门限值的在线CA共享服务器无法共谋获取、篡改和破坏CA的签名私钥,从而保护了CA签名私钥的机密性、完整性和可用性。A security enhanced method of a verifiable threshold signature scheme based on the elliptic curve is present,at by adopting threshold cryptography and proactive secret sharing. The private key of signature service of an online CA is distributed to a few sharing servers. A set of sharing servers which are below the threshold can not obtain the private key by colluding each other, and can not interpolate and corrupt the private key. The confidentiality, integrality and availability of the private key are guaranteed.

关 键 词：入侵容忍 认证 数字签名 椭圆曲线 在线CA 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]