摘要
基于对PKI体系理论的研究和现有技术的分析,针对目前不同PKI体系互连时遇到的困难和认证路径构造、验证中存在的问题,结合桥结构在实际应用中的优势,提出了一种比较现实的跨桥构造不同信任域间认证路径的方法——优化的带有策略约束的路径构造系统。这种新的算法不仅兼顾了已有方法的各种优点,关键是涉及了策略考虑的因素,以达到路径处理的有效性,高效性和可扩展性。
By studying the PKI theory and existing technology, the paper considers the difficulties in connection of different PKIs and problems of certification path building and v alidatation. The paper brings forward a realistic method of building the certification path through different trust fields across BCAs-the optimizal path building algorithm with policy constraints. The new algorithm not only synthetizes most advantages of present methods, but also involves the policy constraints, which makes path processing more efficient and scalable.
出处
《贵州师范大学学报(自然科学版)》
CAS
2007年第2期84-87,共4页
Journal of Guizhou Normal University:Natural Sciences
关键词
公钥基础设施
交叉认证
认证路径构造及验证
public key infrastructure
cross-certification
certification path construction and validation