基于PKI的CA认证系统信任模型的研究  

The Research of CA Authentication System Trust Model Based on PKI

作　　者：彭军[1] 王忠[1] 胡建超[1] 

机构地区：[1]四川大学电气信息学院,四川610065

出　　处：《网络安全技术与应用》2010年第3期6-9,共4页Network Security Technology & Application

摘　　要：在PKI体系中,CA之间的信任关系是一个极为重要的部分,建立相应的信任模型是认证系统中一个必须解决的问题。本文通过分析PKI系统结构和工作原理,并且比较了几种常见的CA信任模型的结构特性和使用范围,提出了一种在适用于校园网认证系统中的新型的CA信任模型。与常见的模型相比,这种复合式的新模型有着更为快捷和灵活的认证路径,更全面的安全机制,和更为方便的扩展能力,因此也更适用于目前较为复杂多变的大型网络环境中。In the PKI system,the trust relationship between CA is an extremely important part,the establishment of the corresponding trust model is a issue that must be solved in an authentication system.By analyzing the structure and working principle of PKI system,and comparing several common structural characteristics of CA trust model and the use of the scope,we propose a new CA trust model in its application to a campus network authentication system.Compare with the previous common models,the new model of this compound has a much more efficient and flexible certification path,a more comprehensive security mechanism,and more easily scalable.Therefore,it is more applicable to the present more complex changing large-scale network environment.

关 键 词：PKI CA 信任模型 认证路径 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]