Abstract: To prevent the user from evading key eserow and protect the eserowed private key, we establish some relationshipbetween the digital certificate and the escrowed key. An eserow scheme based on discrete logarithm is Presented. We also describe theoperation process of sending and receiving message of the user. and how the government can obtain the plain text from the ciphertextwith the help of Eserow Agent.

摘要： 从保护用户托管私钥安全性与防止用户逃避密钥托管的角度出发，提出数字证书应与密钥托管机联系，给出一种基于离散对数的密钥托管方案。另外还描述了通信双方的操作过程以及政府职能部门在密钥托管机构的帮助下强制访问的步骤。

关键词: 公钥基础设施, 证书授权机构, 数字证书, 密钥托管, 公钥密码

CLC Number: 

• F713.36