PKI trust model construction method based on modified resource locating model CAN

Abstract

A PKI trust model construction method based on a modified resource locating model CAN comprises the following steps that (1) nodes are divided into groups according to physical locations of the nodes, wherein the nodes with adjacent physical locations are divided into the same group; (2) according to the searched-for frequency of the nodes, the nodes are divided into different hot levels, and the nodes with adjacent physical locations are further grouped according to the hot levels; (3) resource locating is carried out in combination with a minimum-cost path; (4) a certificate path construction algorithm is obtained according to the groups of the nodes and the minimum-cost path, so that a digital certificate path is constructed rapidly and safely. According to the PKI trust model construction method based on the modified resource locating model CAN, interconnection and interworking between different types of PKI architectures can be realized, and the digital certificate path can be constructed rapidly and safely.

Description

technical field [0001] The patent of the present invention belongs to the field of information security technology, and particularly relates to digital certificate encryption technology. Background technique [0002] With the continuous development of network and e-commerce, security certification becomes more and more important. Now the public key infrastructure PKI (Public Key Infrastructure) system based on X.509 digital certificate is gradually becoming the mainstream of the network identity authentication and authorization system. In the X.509 certification system, the certification authority CA, as a trusted third party, issues digital certificates for entities. The two parties in the communication obtain the other party's digital certificate and use the CA's public key to verify the correctness of the digital certificate, so as to know which specific entity the public key in the digital certificate corresponds to, and then determine whether the other party holds the ...

AI Technical Summary

Problems solved by technology

Because these applications are used independently to protect the information security of these industries and places to a certain extent, and with the continuous development of informatization and the increasing demand for information sharing, these independent PKI systems have gradually become only An island of trust in its own system, which also makes the contradiction between PKI interoperability and the increasing demand for information resource sharing increasingly prominent, thus hindering the application scope of PKI

Images