支持IBE系统的PKCS#11扩充初步研究

The Primary Research of Extending PKCS#11 toSupport IBE System

随着电子商务、电子政务的迅速发展,公钥基础设施PKI已经获得了广泛的应用.PKCS#11等标准的制定使得不同的密码产品和不同的PKI系统间有了更好的兼容性和互操作性.与传统的PKI方案相比,IBE系统能以表明身份的任意字符串为公钥,不依赖于数字证书.为使IBE系统能和现有的PKI系统兼容,本文提出了扩充密码令牌接口标准PKCS#11以支持IBE系统的方案.

As the quick development of E-government and E-commerce,the PKI has been widely deployed.Some standard,such as PKCS#11,can bring better compatibility and interoperability to different cryptography products and systems.Comparing with traditional PKI scheme,IBE can use any arbitrary string as a public key without the need for certificates.To make the IBE system compatible with the existing PKI system,the paper proposes a scheme to extend PKCS#11 to support IBE System.