作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2008, Vol. 34 ›› Issue (17): 127-129,. doi: 10.3969/j.issn.1000-3428.2008.17.045

• 安全技术 • 上一篇    下一篇

基于PKI交叉认证模型的证书路径优化

席 菁1,刘 艳2,杨绚渊2,陆建德2   

  1. (1. 苏州大学计算机学院,苏州215006;2. 江苏省计算机信息处理技术重点实验室,苏州215006)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2008-09-05 发布日期:2008-09-05

Certificate Path Optimization Based on PKI Cross-certification Model

XI Jing1, LIU Yan2, YANG Xun-yuan2, LU Jian-de2   

  1. (1. School of Computer, Soochow University, Suzhou 215006; 2. Jiangsu Province Computer IT Key Lab, Suzhou 215006)
  • Received:1900-01-01 Revised:1900-01-01 Online:2008-09-05 Published:2008-09-05

摘要: 在支持交叉认证的混合信任模型的基础上,将路径验证加入到路径构建中,提出一种基于深度优先搜索的前向路径构建的优化算法,以及一种在路径验证时调整策略树及验证顺序的路径验证优化算法。该方案提高了交叉证书路径构建和验证的效率,增加了交叉证书的实用性。

关键词: 交叉证书, 证书路径, 路径验证, 路径优化

Abstract: The construction and validation of cross-certificate chain usually need plenty of time, which limits its extensive application. Based on a hybrid trust model supporting cross-certification, this paper puts forward two optimizing algorithms about adding path validation into path construction, which support cross-certificate forward path construction on the searching basis of depth first and adjusting strategy tree and sequence validation in the path validation. By these methods, the efficiency to the path construction and the path validation and the availability of cross-certificate are improved.

Key words: cross-certificate, certificate path, path validation, path optimization

中图分类号: