一种基于分布式交叉认证的证书验证代理的设计  

THE DESIGN OF A PROXY OF CERTIFICATE VALIDATION BASED ON DISTRIBUTED CROSS-CERTIFICATION

作　　者：刘艳[1] 杨绚渊[2] 陆建德[3] 

机构地区：[1]苏州大学计算机学院,江苏苏州215006 [2]泰州职业技术学院,江苏泰州225300 [3]江苏省计算机信息处理技术重点实验室,江苏苏州215006

出　　处：《计算机应用与软件》2008年第3期38-40,101,共4页Computer Applications and Software

基　　金：江苏省自然科学基金项目(BK2004039)

摘　　要：阐述了一种用于减轻客户端负担的证书验证代理服务器的设计,描述了该代理服务器的总体框架。该设计在支持分布式交叉认证的混合信任模型的基础上,提出了一种优化的路径构建方法,给出了详细算法和主要数据结构,并对路径验证过程进行了描述。该代理服务器的应用将使得客户端与繁琐复杂的证书验证处理相分离,构建出真正的瘦客户端,提高客户端应用程序效率。The design of a proxy of certificate validation for reducing the client＇s processing burden is introduced, and the overall framework of this proxy is described. Based on the hybrid trust model supporting distributed cross-certification, an optimized method to construct a path is presented, and the detailed algorithms and the main data structures are provided. The process of path validation is described. The application of this proxy separates client from the complicated burdensome cross-certificate validation process. A real thin client is constructed, and the efficiency of the client application is improved.

关 键 词：证书验证代理 DPD/DPV PKI 路径构建 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP309[自动化与计算机技术—计算机科学与技术]