基于代理的公钥密码应用系统设计  

Design of Proxy-based Public Key Cryptographic Application System

作　　者：李东风[1] 魏明欣[2] 李伟平[3] 

机构地区：[1]北京大学电子政务研究院,北京100018 [2]吉林省政府发展研究中心,吉林长春130021 [3]长春吉大正元信息技术股份有限公司,吉林长春130012

出　　处：《信息安全与通信保密》2011年第9期72-73,77,共3页Information Security and Communications Privacy

基　　金：国家科技支撑计划资助项目(编号:2008BAH22B02)

摘　　要：传统的公钥密码技术应用模式因为需要在客户端完成大量复杂的密码计算,导致难以在计算能力弱的环境中应用。数字证书由于在应用过程中要与认证机构通信,以取得证书撤销列表、证书链或在线验证证书的有效性,严重影响了公钥密码技术的应用与推广。文中提出的基于代理的公钥密码应用支持模型中,密码计算和通信通过代理服务完成,客户端仅需发送标准的公钥密码应用请求并接收响应,有效简化了公钥密码技术的应用。As considerable quantities of complex cryptographic computation should be done on client side in the traditional public key cryptosystems,it＇s difficult for the PKI technology to be used in the special case with weak computation capability. In addition,the communication between digital certificate and authentication is required,thus to obtain the CRLs as certificate chain and verify the validity of online certificate,this would greatly reduce the application and development of public key cryptographic technology. In the proposed proxy-based application model,the computation and communication are completed via the proxy service,and the client just needs to send standard application request and accept the corresponding response,thus effectively simplifying the application of public key cryptography.

关 键 词：公钥密码技术 证书应用 代理 多证书支持 

分 类 号：TN918.2[电子电信—通信与信息系统]