入侵容忍技术在CA中的应用研究  

The Research on the Application of the Intrusion Tolerant to the CA

作　　者：柴争义[1] 王晓松[1] 李亚伦 

机构地区：[1]河南工业大学信息科学与工程学院,河南郑州450007 [2]郑州市扶轮外国语学校,河南郑州450001

出　　处：《苏州科技学院学报（自然科学版）》2007年第4期67-69,74,共4页Journal of Suzhou University of Science and Technology （Natural Science Edition）

基　　金：河南省科技攻关基金资助项目(0524220044);河南工业大学基金资助项目(050216)

摘　　要：基于RSA公钥算法和(t,n)门限密码技术,把CA私钥分割成一些份额在n个共享服务器中进行分配,并确保私钥在任何时候都无需重构。通过VC和Openssl对系统进行了实现。Intrusion tolerance refers that a system can still complete its key tasks when it suffers from the attacks, failure or the contingency. CA is the key infrastructure to the PKI. Once its private key is revealed, all the certificates signed by the CA must be cancelled. Based on the RSA and （t,n） secret shared method to ensure that the private key never be reunioned at any time even if some part of the CA is broken, the CA private key is still safe, namely the Intrusion Tolerant of CA. At last, the system is realized by VC and Openssl.

关 键 词：入侵容忍 认证中心 CA私钥 秘密共享 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]