Abstract: This paper provides a means to assist the PKI user to build the certification path by using an agent. It also proposes PKI trust model based on agent and agent structure, as well as the updating algorithm of certification path. It has been proved by analysis that under the circumstances of only one hop between each node in communication network and with 5 nodes in hybrid trust model, this method could improve the efficiency to 2.6 times than that of the traditional method.

Key words: Public key infrastructure, Cross-certification, Certification path

摘要： 提出了一种采用Agent辅助PKI用户获得证书路径的方法，设计了基于Agent的PKI信任模型及Agent内部结构，并提出了Agent的证书路径更新算法。理论分析表明，在5个节点的混合信任模型及通信网络中各节点只存在一跳的情况下，该方法能提高效率约2.6倍。

关键词: 公钥基础设施, 交叉认证, 证书路径