摘要： 利用漫游证书、私钥服务器和SSL协议构建了漫游证书认证系统，在客户浏览器上设计一个插件便可以使用现有的公钥基础设施PKI中的各种服务，没有VPN的复杂架构和高昂成本却可以到达到类似VPN的安全性。并在基于漫游证书认证系统的基础上增加了信任管理，解决安全系统中日益复杂的信任关系管理问题。

关键词: 漫游证书, 信任管理, 认证中心

Abstract: This paper uses roaming certificate, private key server and SSL protocol, constructs a roaming certificate system by installing a plug-in in client browser, thus it achieves the simulative security level of VPN without the complex construction and high cost of VPN and provides users with more convenient PKI services. The paper designs the roaming certificate system, enhances the management of trust relationship and settles the increasing complex trust relationship management problems.

中图分类号: 

• TP393.08