基于2D-CAN协议的信任凭证存储和查找算法  

CAN-based approach to distributed credentials chain discovery

作　　者：姜志宏[1] 王晖[1] 孙晓[1] 陶钧[1] 

机构地区：[1]国防科技大学信息系统与管理学院,长沙410073

出　　处：《计算机工程与应用》2007年第29期48-52,89,共6页Computer Engineering and Applications

摘　　要：信任凭证的存储策略是信任管理领域中广受关注的一个研究内容,它直接影响到凭证的收集、撤销和凭证链的构造等问题。针对RT0信任管理模型,提出了一种基于2D-CAN网络(2-dimensions Content Addressable Network)的信任凭证存储策略,通过<发行者,主体>的二维信息,将信任凭证映射存储到二维CAN协议的对应节点上,从而实现凭证的分布式存储,并提供灵活地查询。同时,研究提出了一个基于凭证图双向生长的信任链发现算法。实验表明,基于2D-CAN协议的凭证存储算法,能达到较高的鲁棒性和查询效率。How to store credentials is key problem in the research field of Trust management（TM）,and has direct effect on collection, revocation of credentials and construction of credential chains.This paper presents a storage strategy of credentials based on 2D-CAN （2-dimensions Content Addressable network）,which maps and stores credentials in 2-dimesional CAN network,by using 2-dimetional information 〈issuer,subject〉An addition to this,a novel algorithm to discover credential chains,based on bidirectional growth of credential graph,is brought forward.Analysis and simulation indicate that the algorithm can obtain greatly efficiency and robustness.

关 键 词：信任管理 信任凭证 凭证链 CAN网络 

分 类 号：TP301.6[自动化与计算机技术—计算机系统结构]