摘要： 公钥基础设施PKI是个功能强大、结构复杂的系统，其中的密钥生命周期管理指的是与公私钥对以及相关证书的创建、颁发及取消的有关功能。双密钥模型是使用不同的密钥使不可否认性服务和机密性服务分开的一种模型。介绍了系统中双密钥模型的实现和整个的密钥生命周期管理，并且利用秘密共享对解密私钥进行备份和恢复。

关键词: 公开密钥基础设施, 密钥生命周期管理, 双密钥模型, 秘密共享

Abstract: In the powerful and complex PKI, key life cycle management denotes the life cycle management functions associated with the creation, issuance, and subsequent cancellation of public/private key pairs and their associated certificates. Dual-key pair model uses distinct key pairs to separate non-repudiation services from confidentiality services. This article describes the implementation of the dual-key pair model and the whole key life cycle management in a system. Whats more, it backups and recovers the decryption private key using secret sharing scheme.

中图分类号: 

• TP393.08