一种基于主动秘密共享技术的CA私钥保护方案  

A Protection Scheme of CA Private Key Based on Proactive Secret Sharing

作　　者：柴争义[1] 白浩[1] 

机构地区：[1]河南工业大学信息科学与工程学院,河南郑州450007

出　　处：《通信技术》2008年第1期113-114,共2页Communications Technology

基　　金：河南省科技攻关基金资助项目(编号0524220044;0624260017);河南工业大学基金资助项目(07XJC029)

摘　　要：CA私钥的安全性是CA可信任性的基础。CA的私钥一旦泄露,其签发的所有证书就只能全部作废。因此,保护CA私钥的安全性就十分重要。主动秘密共享技术将时间分成一个个的周期,综合使用门限密码学、秘密周期性刷新、共享份额恢复来保护CA私钥,有效避免了攻击者长期攻击对CA私钥的破坏性,进一步提高了CA私钥的安全性。The security of CA private key is the basis of CA reliability, Once the private key is revealed,all the certificates signed by CA must be cancelled, So protecting CA private key is very important, Proactive secret sharing protects CA private key by dividing the time into individual periods and using threshold cryptography and refreshing the sharing secrets, thus avoiding the attack on the CA private key by attackers at a long time and enhancing the security of CA private key.

关 键 词：主动秘密共享 CA私钥 门限密码学 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]