基于二进制签名树的移动受信证书管理模型

Management Model for Mobile Trusted Certificates Based on Binary Signature Tree

对目前PKI体系中的证书信任关系和用户受信证书管理进行分析,指出由于数字证书的体积问题,限制了受信根证书的移动,从而制约了移动用户网络安全事务的处理。提出基于二进制签名树的移动受信证书管理模型。利用该模型把用户的受信证书与用户的私钥和个人证书一起存储于IC卡中,使移动用户利用便携的IC卡能方便安全地建立信任关系,进行网络安全事务处理。通过对移动受信证书管理模型存储计算和受信证书验证计算分析,该模型具有较小的存储体积和受信证书验证计算量。

By analyzing the certificates trust relationship and trusted certificates management of present public key infrastructure (PKI) system, it is learnt that the size of digital certificate restricts the mobile of trusted root certificates and further restricts the network affairs of mobile users. A mobile trusted certificates management model based on binary signature tree is presented. Using this model, the user trusted certificates, private key and personal certificate are integrated into one IC card, which makes people set up trust relationship securely and conveniently in traveling. By analyzing the storage computation and trusted certificates verification computation of mobile trusted certificates management model, we know the model have little size and light computation.