基于区块链的PKI数字证书系统  

Blockchain based PKI certificate system

作　　者：阎军智 彭晋 左敏 王珂 

机构地区：[1]中国移动通信有限公司研究院,北京100053

出　　处：《电信工程技术与标准化》2017年第11期16-20,共5页Telecom Engineering Technics and Standardization

摘　　要：本文提出了一种基于区块链技术构建PKI数字证书系统的方法,利用区块链去中心化、不可篡改等特点,解决了传统PKI技术中存在的单点失败问题以及多CA互信难等问题,可降低传统PKI技术中CA中心建设、运营及维护成本,提高证书申请及配置的效率,提升用户使用体验。该系统作为安全基础设施可以应用于多个领域,如4G小基站设备认证、网络切片认证、多CA互信等。Anestablishment method of blockchain based PKI certificate system is proposed in this paper.The blockchain based solutionfeatured with decentralization and temper-resistant could address the issuesof traditional PKI technology, such as single point of failure, difficulty in the establishment oftrust between different CAs. It could decrease the cost of CA deployment, operation, and maintenance, increase the efficiency of certificate enrollment and installation, enhance the user experience. The blockchain based PKI system could be used in many scenarios, such as HeNB authentication, network slicing authentication, and establishment of trust among different CAs.

关 键 词：PKI 数字证书 区块链 

分 类 号：TN918[电子电信—通信与信息系统]