| 一种基于DNSSEC的公钥分发方法及其应用 |
| |
| 引用本文： | 杨忍,南凯. 一种基于DNSSEC的公钥分发方法及其应用[J]. 数据与计算发展前沿, 2015, 6(3): 86-95. DOI: 10.11871/j.issn.1674-9480.2015.03.010 |
| |
| 作者姓名： | 杨忍 南凯 |
| |
| 作者单位： | 1. 中国科学院计算机网络信息中心, 北京 100190;2. 中国科学院大学, 北京 100049 |
| |
| 摘 要： | 公钥分发是非对称加密技术的核心问题之一,解决好此问题对云存储环境中加密文件共享有重要的支持作用。域名系统安全扩展(Domain Name System Security Extensions,DNSSEC)具有安全可信的记录分发功能。本文提出了一种基于DNSSEC的公钥分发方法,利用DNSSEC为用户提供可信的公钥管理服务器定位服务,结合方便快捷的身份认证方法,应用在科研在线文档库中。该方法与传统的PKI相比,具有花费低、灵活性高、易管理等特点。
|
| 关 键 词： | DNSSEC 公钥分发 LDAP 加密 安全 |
| 收稿时间： | 2015-03-15 |
A DNSSEC-Based Public Key Distribution Approach and Its Application |
| |
| Yang Ren,Nan Kai. A DNSSEC-Based Public Key Distribution Approach and Its Application[J]. Frontiers of Data & Computing, 2015, 6(3): 86-95. DOI: 10.11871/j.issn.1674-9480.2015.03.010 |
| |
| Authors: | Yang Ren Nan Kai |
| |
| Affiliation: | 1. Computer Network Information Center, Chinese Academy of Sciences, Beijing 100190, China;2. University of Chinese Academy of Sciences, Beijing 100049, China |
| |
| Abstract: | Public key distribution is one of the core problems in asymmetric encryption technology. Solving this problem is important to encrypted file sharing in cloud storage. DNSSEC provides a reliable and secure resource record distribution function. In the paper, by using DNSSEC to provide a reliable location of public key management server and a convenient method to authenticate, we propose a DNSSEC-based public key distribution approach, which has been applied by DDL. Compared with traditional PKI, this approach has low cost, high flexibility and manageability etc. |
| |
| Keywords: | DNSSEC public key distribution LDAP encryption security |
|
| 点击此处可从《数据与计算发展前沿》浏览原始摘要信息 |
|
点击此处可从《数据与计算发展前沿》下载全文 |
|
