网站可信标识架构与查验协议研究  

Research on Trusted Website Identification Architecture and Check Protocol

作　　者：卢文哲[1,2] 杨风雷[3] 高宁 毛伟[1,2,3] 

机构地区：[1]北龙中网(北京)科技有限责任公司,北京100190 [2]中国科学院大学,北京100049 [3]中国科学院计算机网络信息中心,北京100190

出　　处：《计算机工程》2014年第1期20-24,30,共6页Computer Engineering

基　　金：中国下一代互联网示范工程基金资助项目(CNGI-12-02-007);国家发改委2012年信息安全专项基金资助项目(发改办高技[2013]1309号);北京市科委创新环境与服务体系建设基金资助项目(Z131101000113046);北京市怀柔区2012年度优秀人才培养基金资助项目(京怀组字[2012]46号)

摘　　要：高可信性是下一代互联网的重要特征,主要包括服务提供者可信、信息传输可信和终端用户可信,其中服务提供者的身份可信是构建可信网络的前提。为此,提出一种网站身份可信标识的体系结构,描述基于域名资源记录的网站可信标识查验协议。通过该协议,用户可在各种互联网应用中方便地查询服务提供者的身份信息。实验结果表明,该体系结构与相关查询协议在效率、易用性、可扩展性等方面均可满足实际应用需要,单机查询性能达到15万次/s。High reliability is an important characteristic of Next Generation Internet（NGI）. The Internet is on the way to trusted network. The trusted network includes the trust of service providers, the trust of the network information transmission and the trust of end-users. The identity trust of service providers is the important base of the trusted network. Aiming at this problem, this paper describes a technical architecture of a website trusted service and explains the Domain Name Server（DNS）-based check protocol in details. By the check service, users can get the Internet service provider＇s information conveniently from Internet applications. Experimental results show that this architecture and the related cheek protocol can meet the needs of the practical application in terms of efficiency, usability, scalability, etc. The check performance of one machine can reach 150 000 times per second.

关 键 词：可信网络 可信标识 域名服务器 资源记录 数字证书 签名 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]