一种基于代理签发的PMI特权委托模型  

A Delegation Issue-Based PMI Privileged Delegation Model

作　　者：洪帆[1] 张樟[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机工程与科学》2007年第7期30-33,54,共5页Computer Engineering & Science

摘　　要：代理签发服务是X.509 2005修正草案中提出的一种新的特权委托方式,该方式实现对证书的代理签发,具有策略易于发布、审计方便、密钥易于维护等优点。通过分析X.509 v4(2000)中委托模型的不足,基于X.509 2005修正草案中的DIS提出了一个包含代理签发模块的委托模型,并对该模型的性能进行了进一步的分析。Delegation issuing service is one of the new delegation modes issued by the X. 509 2005 draft amendment. Delegation issuing of certificates in this fashion gains many advantages such as easy promulgation, convenient audition and facile maintenance and so on. By analyzing the deficiency of the delegation model in X. 509 v4（2000）, this paper presents a new delegation model which includes DIM and is based on DIS. A further analysis on the performance of this model is carried out.

关 键 词：特权管理基础设施 代理签发服务 委托 代理签发模块 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]