结合生物特征的PKI/CA认证系统设计  

Design of PKI/CA Certification System Combined with Biometrics

作　　者：徐辉 张莹 步晓亮 李强 XU Hui;ZHANG Ying;BU Xiao-liang;LI Qiang(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2018年第7期1684-1688,共5页Communications Technology

摘　　要：生物特征认证技术即利用人的生物特征进行身份认证,被越来越广泛地应用于各种需要身份认证的新兴领域。PKI/CA认证体系作为传统、成熟的认证体系,也被广泛应用于各种身份认证要求较严格的领域。分别对生物特征认证技术、PKI/CA认证体系技术进行研究,阐述几种生物特征在PKI/CA认证体系中运用的方式,设计了结合生物特征的PKI/CA认证系统,重点设计了系统中的关键数据结构和主要流程,并对系统进行了分析,实现了生物特征与传统PKI/CA认证体系的结合,能满足不同安全级别的身份认证需求。Biometric authentication technology,using human biometrics for identity authentication,is now increasingly applied in a variety of emerging areas that require identity authentication.As a traditional and mature certification system,the PKI/CA certification system is also widely used in various areas where strict identity authentication is required.Firstly,the biometric authentication technology and PKI/CA certification system technology are discussed respectively,and the application ways of several biometrics in the PKI/CA certification system explored.And meanwhile,a PKI/CA certification system combined with biometrics is constructed,and the key data structures and main processes in the system emphatically designed.Finally based on careful analysis of the system,the perfect combination of biometrics with traditional PKI/CA certification system is realized,and this could meet the identity authentication requirements of different security levels.

关 键 词：生物特征认证 PKI/CA认证 身份认证 数字证书 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]