信任委托证书图搜索研究  

Delegation graph search algorithms based DAG in distributed trust management

作　　者：张明武[1] 杨波[1] 张文政 

机构地区：[1]华南农业大学信息安全研究所,广州510642 [2]现代通信国家重点实验室,成都610041

出　　处：《计算机工程与应用》2007年第4期125-127,133,共4页Computer Engineering and Applications

基　　金：国家自然科学基金(the National Natural Science Foundation of China under Grant No.60372046;60573043);现代通信国家重点实验室基金(9140c1108010606)。

摘　　要：分析了分布式信任管理的证书结构及证书授权模型,包括线性链式授权、门限授权、条件授权和复合证书授权等,探讨了不同模型下的证书表达与证书链处理机制,提出了基于有向无环图DAG的证书图结构,并对利用DAG表达证书图作出证明。在证书链的搜索算法中,通过对多重边的有向无环图用深度优先和广度优先算法结合实现对证书链的搜索,避免证书图中产生的环形链而导致低搜索效率问题。Certification structures and delegation models in distributed trust management,including chain delegation,threshold delegation,conditional delegation and composed delegation relation,are introduced in this paper.A proof of describing a directed graph of certificate chain as a DAG （Directed Acyclic Graph） is given,which can avoid the cyclic path.Furthermore,an algorithm of certificate chain processing is presented,which searches the DAGs,and a DAG by depth-first-algorithm,and inter-DAGs by breadth-first-algorithm.

关 键 词：授权 信任管理 有向无环图 证书链搜索 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]