Author Login Editor-in-Chief Peer Review Editor Work Office Work

Computer Engineering ›› 2007, Vol. 33 ›› Issue (01): 178-180. doi: 10.3969/j.issn.1000-3428.2007.01.062

• Security Technology • Previous Articles     Next Articles

A Distributed Algorithm of Certificate Path Construction in Reverse Direction

YANG Jie1,2, DING Wei1,2   

  1. (1. Department of Computer Science and Engineering, Southeast University, Nanjing 210096; 2. China Education and Research Network Eastern (North) Regional Center, Nanjing 210096)
  • Received:1900-01-01 Revised:1900-01-01 Online:2007-01-05 Published:2007-01-05

一个基于逆向搜索的分布式证书路径构建算法

杨 杰1,2,丁 伟1,2   

  1. (1. 东南大学计算机科学与工程系,南京 210096;中国教育科研网华东(北)地区网络中心,南京 210096)

Abstract: Certificate verification is a key component in implementation of PKI. According to the PKIX, it includes two steps to verify a certificate: certificate path construction and certificate path verification. But the PKIX makes silence on certificate path construction and there are very little existing literatures that discuss this issue. So this paper proposes a distributed algorithm in the reverse direction to construct a certificate path.

Key words: Public key infrastructure(PKI), Certificate path construction, Distributed algorithm

摘要: 数字证书的验证是公钥基础设施(PKI)安全实施的关键,PKIX规定证书的验证一般分为证书路径的构建和证书路径的验证这2个步骤,然而标准中对证书路径的构建方法未加阐释,该文在分析了现有证书路径构建算法的基础上,提出了一个基于逆向搜索的分布式证书路径构建算法。

关键词: 公钥基础设施(PKI), 证书路径构建, 分布式算法