Abstract: Because Public Key Infrastructure(PKI) has some defects in its basic theories, a novel authentication technology is urgently required to replace PKI in kinds of security domains. Compared with the PKI-based authentication systems which are widely used at present, Identity-Based Combined Public Key(IBCPK) algorithm has two advantages: validating information immediately and managing large numbers of keys effectively. In this article, IBCPK is presented and a certificate management system based on IBCPK is developed for managing the keys produced in IBCPK system. Additionally, the certificate is designed in a new architecture in order to meet the requirements of the key management in IBCPK system.

Key words: identity, Combined Public Key(CPK), Identity-Based Combined Public Key(IBCPK), certificate management

摘要： 基于标识的组合公钥算法是一种新型的公钥认证技术，解决了当前认证领域的规模化密钥管理以及信息验证的直接性问题。该文分析当前的公钥认证系统存在的问题，介绍基于标识的组合公钥算法的原理及构造方法，描述基于IBCPK的证书管理系统的设计与实现。该系统可以有效地管理IBCPK体系下的密钥分发与维护。

关键词: 标识, 组合公钥算法, 基于标识的组合公钥算法, 证书管理

CLC Number: 

• TP393.08