公钥密码基础设施在电信运营商的应用

随着密码法的实施，我国将信息系统密码应用提升到了法律层面，要求加强公钥基础设施在网络实体互通互信方面的应用。提出了一种采用严格层次结构建设统一电信公钥基础设施的方案，即建立一个全国电信运营商根CA作为信任锚，而各大电信运营商成为独立的子CA，形成“全国电信运营商根CA－电信运营商子CA”的证书信任链，提供PKI安全服务。该方案不仅可以实现电信运营商CA之间的互通互认，也有利于统一电信公钥基础设施成为全球范围信任的电子认证服务提供商，进而在国际证书标准制定上有更大的影响力和话语权。

Application of public key infrastructure in telecom operators

With the implementation of cryptography law,the application of cryptography in information system in China has been promoted to the legal level,which requires the application of public key infrastructure in the mutual trust of network entities to be strengthened.A scheme of constructing unified telecom public key infrastructure with strict hierarchical structure was proposed,that is,establishing a national telecom root CA as a trust anchor,and each major telecom operator becomes an independent sub-ca,forming a certificate trust chain of “national telecom root CA- telecom operator sub-ca” and providing PKI security services.This scheme can not only realize the mutual recognition between telecom operators,but also help unify the telecom public key infrastructure to become a globally trusted electronic authentication service provider,so as to have more influence and say in the formulation of international certification standards.