Block chain-based PKI certificate system model and certificate management method

Abstract

The invention discloses a block chain-based PKI certificate system model and a certificate management method, which are used for optimizing the performance problem caused by introducing a block chain into a PKI system by introducing an RSA accumulator technology. Based on a block chain PKI system model, transparency and traceability are provided in an unsafe internet environment, operation of the CA on the digital certificate is uploaded to a block chain jointly maintained by multiple parties through coupled block chain nodes, and the method has the characteristics of decentralization and CA behavior traceability. The RSA accumulator technology is introduced, and the scheme is proved through knowledge, so that a large number of digital certificates are prevented from being stored on the block chain, and the storage space is compressed. Aiming at the characteristics of a digital certificate management full life cycle and an RSA accumulator, a digital certificate management method based on a block chain and a double RSA accumulator is provided, and all participants of a PKI system can locally verify the legality of the digital certificate through the accumulator state disclosed by the block chain in combination with the digital certificate and a corresponding proof.

Description

technical field [0001] The invention belongs to the application field of block chain technology, and mainly relates to block chain technology, a cryptographic RSA accumulator, a public key infrastructure (Public Key Infrastructure, PKI) and a digital certificate management method. Background technique [0002] With the development and popularization of the Internet, network activities account for an increasing proportion of human daily activities. The development of mobile Internet enables people to communicate through terminals at any time, while the development of e-commerce and mobile payment technology has shifted the focus of economic activities to online. There is no doubt that strengthening the construction of network security is of vital significance to the real economy. [0003] The generation and distribution of security keys is the basis for secure communications on the Internet. PKI system is the most popular solution in network communication at present. A PKI ...

AI Technical Summary

Problems solved by technology

[0007] The main purpose of the present invention is to propose a PKI certificate system model and digital certificate management method based on block chain and RSA accumulator, combining traditional PKI digital certificate trust system with block chain, aiming to solve the problems in traditional PKI system Centralization issues, and through the introduction of RSA accumulator technology, optimized for the performance problems caused by the introduction of blockchain in the PKI system

Images