基于SPKI的分布式委派凭证存储框架  

A Distributed Delegation Credential Storage Framework Based on SPKI

作　　者：隋品波 尹刚[2] 周宁[3] 史殿习[2] 王怀民[2] 

机构地区：[1]湖南省人民检察院技术处,湖南长沙410001 [2]国防科技大学计算机学院,湖南长沙410073 [3]总参第61研究所,北京100481

出　　处：《计算机工程与科学》2009年第7期23-24,49,共3页Computer Engineering & Science

基　　金：国家973计划资助项目(2005CB321800);国家863计划资助项目(2006AA01Z198;2007AA010301)

摘　　要：信任管理(TM)是面向开放多域环境的分布式授权技术。TM系统从网络中搜索委派凭证以进行分布式授权决策,面临效率和可用性问题。本文提出一种基于SPKI的分布式凭证存储框架,将委派凭证冗余地存储到相关实体,以避免委派凭证的动态搜索过程,有助于解决现有TM系统凭证管理的局限性。Trust Management （TM） is a distributed authorization technology for open multi domain environments. TM systems search delegation credentials from the network for making distributed authorization decisions, which is not efficient and highly available. This paper proposes a distributed credential management framework, which stores delegation credentials redundantly at relevant entities to avoid dynamic search processes of delegation credentials. Our approach is helpful in overcoming the limitations of the credential management mechanisms of the existing TM systems.

关 键 词：信任管理 委派 凭证存储 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]