Abstract: The construction and validation of cross-certificate chain usually need plenty of time, which limits its extensive application. Based on a hybrid trust model supporting cross-certification, this paper puts forward two optimizing algorithms about adding path validation into path construction, which support cross-certificate forward path construction on the searching basis of depth first and adjusting strategy tree and sequence validation in the path validation. By these methods, the efficiency to the path construction and the path validation and the availability of cross-certificate are improved.

Key words: cross-certificate, certificate path, path validation, path optimization

摘要： 在支持交叉认证的混合信任模型的基础上，将路径验证加入到路径构建中，提出一种基于深度优先搜索的前向路径构建的优化算法，以及一种在路径验证时调整策略树及验证顺序的路径验证优化算法。该方案提高了交叉证书路径构建和验证的效率，增加了交叉证书的实用性。

关键词: 交叉证书, 证书路径, 路径验证, 路径优化

CLC Number: 

• TP309