证书管理策略形式化问题的分析与研究  

ANALYSIS AND STUDY ON MECHANISM OF POLICY FORMALIZATION FOR CERTIFICATE MANAGEMENT

作　　者：刘颖[1] 李真[1] 陈才贤[1] 

机构地区：[1]山东经济学院计算机科学与技术学院,山东济南250014

出　　处：《计算机应用与软件》2009年第7期283-285,共3页Computer Applications and Software

摘　　要：大多数可信机构通常采用离线手控的策略来管理证书的产生和撤销,然而这种方法不能满足目前越来越多的应用中对证书管理策略形式化和自动化执行的要求。针对此问题,提出了认证和撤销策略的一种形式化表示及其支持框架,由捆绑在服务器上的通用策略引擎来实施证书管理策略。该框架容易配置且对目前的公钥基础设施(PK I)来说不需要作任何变动,有极高的可用性。Generally, certificate creation and revocation in trusted agents are managed by policies which are carried out off-line and by hand. But it doesn＇t meet the requests of the growing applications where certificate management policies can be formalized and carried out auto- matically. Aiming at this problem, a formalized representation for certification and revocation policies and its supporting framework are proposed in the paper. In the framework, the policies are implemented by generic policy engines bound on servers. The framework is easy to deploy and is quite useable. It needs no modifications to current public-key infrastructure.

关 键 词：公钥基础设施 证书管理 策略表示 策略实施 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP393.08[自动化与计算机技术—计算机科学与技术]