作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2007, Vol. 33 ›› Issue (01): 178-180. doi: 10.3969/j.issn.1000-3428.2007.01.062

• 安全技术 • 上一篇    下一篇

一个基于逆向搜索的分布式证书路径构建算法

杨 杰1,2,丁 伟1,2   

  1. (1. 东南大学计算机科学与工程系,南京 210096;中国教育科研网华东(北)地区网络中心,南京 210096)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2007-01-05 发布日期:2007-01-05

A Distributed Algorithm of Certificate Path Construction in Reverse Direction

YANG Jie1,2, DING Wei1,2   

  1. (1. Department of Computer Science and Engineering, Southeast University, Nanjing 210096; 2. China Education and Research Network Eastern (North) Regional Center, Nanjing 210096)
  • Received:1900-01-01 Revised:1900-01-01 Online:2007-01-05 Published:2007-01-05

摘要: 数字证书的验证是公钥基础设施(PKI)安全实施的关键,PKIX规定证书的验证一般分为证书路径的构建和证书路径的验证这2个步骤,然而标准中对证书路径的构建方法未加阐释,该文在分析了现有证书路径构建算法的基础上,提出了一个基于逆向搜索的分布式证书路径构建算法。

关键词: 公钥基础设施(PKI), 证书路径构建, 分布式算法

Abstract: Certificate verification is a key component in implementation of PKI. According to the PKIX, it includes two steps to verify a certificate: certificate path construction and certificate path verification. But the PKIX makes silence on certificate path construction and there are very little existing literatures that discuss this issue. So this paper proposes a distributed algorithm in the reverse direction to construct a certificate path.

Key words: Public key infrastructure(PKI), Certificate path construction, Distributed algorithm