基于PKI/CA的分布式跨域信任平台研究与实现  

Research and implementation of distributed inter-domain trusted platform based on PKI/CA

作　　者：颜海龙[1] 喻建平[1] 胡强[1] 冯纪强[1] 

机构地区：[1]深圳大学ATR国防科技重点实验室,广东深圳518060

出　　处：《计算机工程与设计》2013年第2期686-690,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(61171072)

摘　　要：为了支持多CA环境下的跨信任域认证,实现数字证书互认,构建了基于PKI/CA技术体系的分布式跨域信任平台。设计了该平台的系统结构框架,主要包括可信CA管理与可信CA控制两部分。详细分析了两个子系统的主要功能结构和工作流程,并探讨了平台实现的关键技术机制。结合深圳电子政务实际需求,开发了平台原型系统。应用实例表明,该平台具有较强的灵活性和可扩展性,能够有效解决不同认证体系下的数字证书兼容应用问题。To support interdomain authentication in the environment of multiCAs and realize recognition of digital certificate, a distributed interdomain trusted platform based on PKI/CA is constructed. Firstly, the corresponding architecture framework is designed. It mainly consists of trusted CA management and trusted CA control. Then the function and workflow are analyzed in detail, and several key technologies for the realization of platform are introduced. Finally, according to the demand for EGovern ment in Shenzhen, the prototype system is develope＆ Examples show that the platform with strong flexibility and scalability can ef fectively solve digital certificate compatible application problems under different certification systems.

关 键 词：公钥基础设施 数字证书 跨域 认证 信任平台 

分 类 号：TN915[电子电信—通信与信息系统]