基于CPK的密钥管理系统设计

密钥管理过程中,在保证安全性的前提下减少通信双方的交互步骤、交互数据量,以及通信实体的运算量是人们期望达到的目标。对于此问题,组合公钥（CPK）可以提供比较有效的解决途径。简单介绍CPK的基本原理,总结设计基于CPK的密钥管理系统应关注的CPK要素和需注意的事项,给出一个基于CPK的密钥管理系统实例,描述其工作流程,并重点分析设计基于CPK的密钥管理系统会遇到的几个安全问题。

Design on CPK-based Key Management System

In the process of key management, under the precondition of guaranteeing the security, it is expected to achieve the goal that reducing round trips, total bandwidth and communication entity＇ s computation. Aiming at this problem, combined public key（CPK） is proposed to provide effective means. This paper introduces the fundamental of CPK briefly, summarizes the CPK elements and points out that it should be paid much attention on designing CPK-based key management system. Then the paper gives a CPK- based key management system demonstration, describes its working flow, and analyzes several security questions that might be faced in designing CPK-based key management.