网格中多CA环境密钥管理方案的研究

针对网格环境中的CA认证模型,提出基于可信任第四方的密钥全托管机制,对用户密钥进行统一的托管、存取、查询和验证.该模型独立于现有的分布式CA,将密钥的管理与用户本身的密钥保密强度分离,从而最大程度地降低密钥丢失和被窃的可能性.利用上述理论,作者将密钥托管机制应用在数字图书馆的资源权限认证过程中,降低了数字图书馆用户群复杂性对数字资源安全的危害程度.

Study on private key management in multi-CA grid environment

Facing with the CA certificate model in net-grid environment, it was brought forward a private key trusteeship based on a trusted forth party to integrate trusting, access, quering and validating for the user private key. The model was independented of the existing distributed CA, separated the private key management from the local user private key keeping, so it could be lower the probability of private key losing and stealing. Using the theory above, it was applied mechanism in the resources rights certificate process, reduced the damage of complexity of digital user groups to the digital resources security.