基于公钥密码体制的网络认证技术  

Network authentication technology based on public key system

作　　者：庞松涛 

机构地区：[1]浪潮集团,北京100142

出　　处：《电信科学》2016年第2期170-174,共5页Telecommunications Science

摘　　要：网络认证技术是"互联网+"行动计划应用推广的关键安全保障,基于公钥密码体制的数字签名已经成为身份与信息认证的主要手段,而数字签名有赖于认证中心(CA)及其基础设施(PKI)。目前,认证中心依然存在身份认证不能互信互认、投入高、安全控制及运维难度大等问题。提出一种在不降低安全程度的情况下,缩短公钥密码长度,实现公钥可视化的技术,这种技术可以不再完全依赖第三方的认证机构,是去除认证中心当前存在问题的一种有效途径。Network authentication technology is the key to the application of internet plus security. The digital signature which depends on the certificate authority （CA） and PKI based on public key system is the main method for identity and message authentication. However, over the years, there are still many problems for the development of CA. The digital signature is not mutual trust and mutual recognition over the application granted by different CA. Moreover, it costs a lot to construct and maintain CA. In order to solve the above problems, one of ways for the improvement is to shorten the length of public key under the condition of not reducing the degree of security. In this way, the public key can be widely recognized under the regulations instead of the third party certification. The application of this public key technology will be an effective way to remove the existing problems of the CA.

关 键 词：数字签名 身份认证中心 可视化公钥 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]