CFL可信认证研究  

Study on the CFL Trust Authentication

作　　者：焦毅航 李有文[1] 范修斌 李存才 

机构地区：[1]中北大学数学系,太原030051 [2]中科国民科学技术研究院,北京100086 [3]北京博文广成信息安全技术有限公司,北京102206 [4]为者常成网络科技有限责任公司,内蒙古包头014070

出　　处：《信息安全研究》2016年第7期608-620,共13页Journal of Information Security Research

摘　　要：通过对可信计算、认证技术、认证体制的梳理,给出了可信计算与信息安全的关系示意图,对各种智能卡认证技术作了详细的分析与比较,进一步给出了可信认证的定义,即若认证体制在具体应用中所有计算都是可信计算,则该认证体制是可信认证。证明了若CFL用户基于独立硬件的计算,CFL证书生成中心也基于独立的硬件计算,则CFL认证体制可实现可信认证.This paper shows a schematic diagram about the relat ionship between t rusted comput ing and information security through analyzing the trusted computing, authentication techniques and authentication systems. Moreover,it not only makes a detailed analysis and comparison about various smart card authentication technology and also gives further definition of trust authentication that is if al l the computation in the authentication systems is trusted,the authentication system is trusted. At last,it proves that if the CFL users are based on the independent hardware and CFL certi ficate generation center is also based on the independent hardware calculation, then the CFL authentication system can be trusted.

关 键 词：可信计算 认证技术 认证体制 CFL(Chen Fan and Lü) 可信根 可信认证 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]