基于多信任机制DNS安全扩展的设计与研究  

The Design & Research of DNSSEC under Multi-trust Model

作　　者：伊卫星[1] 

机构地区：[1]苏州大学网络中心,江苏苏州215006

出　　处：《苏州大学学报（工科版）》2007年第2期58-61,共4页Journal of Soochow University Engineering Science Edition (Bimonthly)

摘　　要：在委托信任链机制及公钥密码体制的基础上,提出一种可供选择的DNSSEC实施方案,对不同的信任机制进行深入分析和研究,提出了综合运用基于对称密钥密码体制、基于PKI以及授权认证等方式的DNSSEC实施方案,以满足安全域名查询的效率要求和广泛区域的差别性。Based on the analysis of trust chain mechanism and public key cryptography, a scheme about DNSSEC is provided and its procedure is analysed completely, and according to the detailed analysis and research about many different trust menchnaism, a comprehensive scheme is provided based on the sysmmetric key cryptography,PKI and empowering authentication for satisfying the efficiency for secure name search and the difference of many zones.

关 键 词：DNS安全性扩展 公钥密码体制 对称密钥密码体制 公开密钥基础设施 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]