摘要
在现行PKI信任模型的证书路径构造方案中,层次模型证书路径构造对根节点安全性依赖过高,而网状模型路径构造时存在回路。针对上述问题,提出一种新的依赖图信任模型,证明依赖图节点之间有多条路径且没有回路,给出新模型下的证书路径构造方法。实验结果表明,新模型的证书路径构造效率等同于层次模型,安全性与网状模型相近。
In the current certificate path building schemes of PKI trust model, the following defects exist that the hierarchical model certificate path building has heavy dependence on the security of root node, and the mesh model path building can generate loops. In order to solve the above problems, a new depender graph trust model is proposed which is verified there are many paths between depender graph nodes but no loops, and certificate path building method in the new model is put forward. Experimental results show that the efficiency of the certificate path building of new model is equivalent to that of the hierarchical model, and has similar security comparing to the mesh model.
出处
《计算机工程》
CAS
CSCD
北大核心
2009年第18期148-150,153,共4页
Computer Engineering
关键词
层次模型
网状模型
依赖图模型
证书路径构造
hierarchical model
mesh model
depender graph model
certificate path building
