PKI中桥信任模型的优化

PKI中存在多个可信任点和无终止的可信任环的可能性,使证书认证路径的有效发现复杂和耗时,路径构造的任务非常繁重。提出的基于路径代理的桥信任模型利用路径代理服务器,采用生成树算法提前进行路径构造存储,从而将复杂的路径构造问题转化为路径查询问题,实现了对PKI桥信任模型的优化。

Optimization of Bridge Trust Model in PKI

In PKI technique,by making use of CA certification can availably avoid active attack.In each CA certification area can build hierarchical models or network models,then by traditional bridge trust model can also reach intercommunication among different areas,so that CA and entities can trust each other.But in PKI,perhaps exist more than one trusted dits or an endless circle,thus discovery an certification's path is becoming very complex and time-consuming,so the task that build the path will be an overwork.In the paper by using a path agent server in path agent bridge trust model,by adopting spanning tree algorithm built and store the path ahead of schedule,thus the complex task that build the path is converted into a task that search paths,therefore realize the optimization of the bridge trust model in PKI.