基于云平台访问控制的混合密钥管理研究  

Hybrid Key Management based on Access Control of Cloud Platform

作　　者：叶延婷[1] 李秦伟[1] 杨灿[2] 

机构地区：[1]贵州大学计算机科学与技术学院,贵州贵阳550025 [2]贵州大学大数据与信息工程学院,贵州贵阳550025

出　　处：《通信技术》2017年第3期528-532,共5页Communications Technology

基　　金：贵州省联合基金项目(黔科合LH字[2014]7637)~~

摘　　要：针对云平台访问控制的发展现状,研究分析PKI和CPK密钥管理体系,并结合云环境的特点,提出了一种混合密钥管理机制,从而对云中用户与资源实行逻辑分离的管理。仅将PKI应用于用户身份认证,避免因大量证书的频繁存取而产生的PKI瓶颈;将CPK应用于对资源的认证和授权管理,解决用户与云服务提供商之间的互不信任问题。该机制实现了对云中用户、资源的双重认证,为用户提供了可溯源的安全服务,对建立安全可信的云环境具有重要意义。Based on the development of access control on cloud platform PKI and CPK key management systems are discussed and analyzed. Combined with the characteristics of cloud environment, a hybrid key management mechanism is proposed, thus to implement logically-separated management on cloud users and resources. PKI is applied only to authenticated users, thus avoiding the PKI bottle-lock, while CPK is used to practise resources authentication and authorization management. The hybrid key management mechanism implements two-factor authentication of between the users and resources, and provides users with a traceable security service, this is certainly important for the establishment of secure and trusted cloud environment.

关 键 词：云环境 密钥管理 PKI CPK 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]