一种灵活实用的数字证书中敏感属性保密方案  

Flexible and Practical Scheme to Preserve Confidentiality of Sensitive Attributes in Digital Certificate

作　　者：廖俊国[1] 凌乐真[1] 朱彬[1] 

机构地区：[1]湖南科技大学计算机科学与工程学院,湘潭411201

出　　处：《计算机科学》2010年第6期128-130,216,共4页Computer Science

基　　金：国家自然科学基金项目(90818004)资助

摘　　要：在开放式环境中,数字证书常用于身份认证和授权管理。数字证书通常包含一些敏感属性,因此,数字证书中敏感属性的保密研究受到广泛的关注。提出了一种灵活实用的数字证书中敏感属性保密方案,分析了该方案的安全性和性能。在该方案中,数字证书中不同的敏感属性分别用由同一个主密钥生成的不同子密钥进行加密,该方案具有可选择性揭露数字证书中敏感属性、密钥管理简单、时间开销少等特点。以X.509作为证书格式,实现了该数字证书中敏感属性的保密方案。In open environment,digital certificate is used in identity authentication and authorization rnanagement. Digital certificate often includes sensitive attributes, so the research on preserving confidentiality of sensitive attributes in digital certificate becomes concerned. This paper presented a flexible and practical scheme to preserve confidentiality of sensitive attributes in digital certificate, and analysed its security and performance. In the scheme, the different sensitive attributes in digital certificate are encrypted with different sub-keys generated from a main key. The scheme has some characteristics as follows： selectively disclosing sensitive attributes in digital certificate, simple key management, and low time cost. Based on X. 509, the presented scheme was implemented.

关 键 词：数字证书 敏感属性 保密 X.509 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]