CAJ | 학술논문

公钥基础设施(PKI)可以为日益丰富的网络应用提供安全保障.但传统的PIG体系中,由于单一信息认证机构(CA)无法有效鉴别各类证书信息等原因,系统可能签发出包含不真实实体信息的数字证书.本文通过建立证书信息信任评估模型(IAEM)并进行分析,提出一种基于RSA算法的非集中式CA体系:RWTCA.该体系基于真实信任关系,构建在各证书信息权威认证机构之上,证书实体信息的真实性得到提高.同时,此类体系被证明可以应用于各类复杂的信任关系下.
공약기출설시(PKI)가이위일익봉부적망락응용제공안전보장.단전통적PIG체계중,유우단일신식인증궤구(CA)무법유효감별각류증서신식등원인,계통가능첨발출포함불진실실체신식적수자증서.본문통과건립증서신식신임평고모형(IAEM)병진행분석,제출일충기우RSA산법적비집중식CA체계:RWTCA.해체계기우진실신임관계,구건재각증서신식권위인증궤구지상,증서실체신식적진실성득도제고.동시,차류체계피증명가이응용우각류복잡적신임관계하.
Public key infrastructure (PKI) provides a security guarantee for the rapid growing of network applications.However,in traditional PKI systems,for some reasons as the only trusted party CA verifies the entire end-entities' identity,it may issue certificates with spurious identity.By modeling the trust formula of certificate contents,authors present a new CA system based on RSA algo-rithm with non-centralized structure: RWTCA.The new system,based on real world trust relationship and built on some authorities of certificate contents,can issue standard X.509 certificates and has good reliability and flexibility.