异构信任域的跨域授权  

The Cross-Domain Authorization of Heterogeneous Trustworthy Domains

作　　者：孟欣[1] 胡亮[1] 初剑峰[1] 林海群[1] 刘博超[1] 

机构地区：[1]吉林大学计算机科学与技术学院,长春130012

出　　处：《吉林大学学报（理学版）》2010年第1期89-93,共5页Journal of Jilin University:Science Edition

基　　金：国家自然科学基金(批准号:60873235;60473099);教育部新世纪优秀人才支持计划项目基金(批准号:NCET-060300);吉林省重点科研项目基金(批准号:20080318)

摘　　要：针对跨IBE(基于身份加密)和PKI(公开密钥基础构架)异构域可信互联,提出一种实现跨域授权的解决方案.该方案将PKG和CA作为各自域TPKG和TCA内用户的代理,并把它们注册到对方域内成为特殊用户ClientPKG和ClientCA,借助映射后的ClientPKG和ClientCA构成跨异构域信任链,真实、客观地实现了PKI和IBE域内任意用户的跨域授权.There still exist two problems in the trustworthy interconnection of heterogeneous domains between IBE （Identity Based Encryption） and PKI （Public Key Infrastructure） ;one is cross-domain authorization,the other is mobile identity.In view of the above mention facts,the authors put forward a solution scheme of the cross-domain authorization among heterogeneous trustworthy domains.In this scheme,PKG （Private Key Generator） is regarded as the agency by its users to register in the PKI domain.Meanwhile CA （Certificate Authority） is regarded as the agency by its users to register in the IBE domain.Therefore,this kind of crossdomain authorization has intact trustworthy links.Finally,conclusion can be drawn that this scheme is fair for users in both PKI domain and IBE domain to cross-domain authorize by analyzing intact trustworthy links.

关 键 词：基于身份加密(IBE) 公开密钥基础构架(PKI) 异构信任域 跨域授权 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]