国防科技大学学报2013，Vol.35Issue(1)：169-174,6.
一种开放式PKI身份认证模型的研究
Research on open identity authentication model for PKI
摘要
Abstract
Some problems about the traditional identity authentication model for PKI (Public Key Infrastructure) were analyzed. For example, because certificate status verification service and key verification service depend on different service providers who have not enough trust degree in open network environment, the trust degree of the traditional model decreases and its risk increases. Additionally, there are other problems about cross-CAs and incomplete authentication service in the traditional model. Thus a new open identity authentication model was put forward for PKI, which can solve the above problems. In this model, the above two verification services were both provided by CA, and the service result was applied by providing identity certification file instead of OCSP answer. The trust degree of the traditional model and our model by using the cloud trust model presented by other researchers was calculated. The result of the calculating test shows that our model can improve the trust degree obviously. Finally, the prototype system of our model was completed, and especially the performance of the model was optimized. The test shows that the model has good practical value.关键词
PKI/OCSP/CA/开放式身份认证Key words
PKI(public eey infrastructure) /OCSP(online certificate status protocol) /CA(certificate authority) /open identity authentication分类
信息技术与安全科学引用本文复制引用
周晓斌,许勇,张凌..一种开放式PKI身份认证模型的研究[J].国防科技大学学报,2013,35(1):169-174,6.基金项目
国家973项目(2009CB320505) （2009CB320505）
