证书策略的分类分级研究

分类分级的证书策略体系建设是电子认证服务发展的必然要求。然而,证书策略空间的复杂性和国内电子认证服务的多样性给证书策略体系的建设和推广带来困难。本文在总结国内外证书策略体系研究成果的基础上,提出了渐进的分类分级证书策略体系建设方法,设计了配套的对象标识符结构,并以自然人证书策略的制定为案例来说明该方法的实用性和有效性。

The Classification and Grading of Certificate Policies

A classified and graded system of certificate policies is necessary for the development of electronic authentication services. However, owing to the complexity of certificate policy space and the diversity of domestic electronic authentication services, it is difficult to develop and popularize such a system. Based on previous reseamhes on the certificate policy system, this paper proposes a progressive approach to develop the classified and graded system of certificate policies. The corresponding object identifier system is also designed. Finally, a case study on personal digital certificates is provided to demonstrate the usefulness of the proposed approach.