基于信任管理系统的P2P网络安全结构SAP2P

SAP2P ：A Security Architecture for P2P Network Applications Based on Trust Management System

P2P网络具有离散、动态和自治的特点．这些特点使得一些传统的安全技术并不能很好解决P2P网络认证、授权和保密通信等这些安全问题．本文设计了新的信任管理系统ExSPKI用于在P2P网络中建立信任关系，并以此为基础设计了新的安全结构SAP2P（Security Architecture of Peerto Peer Network），从而可以为P2P网络用户之间以及系统中安全功能模块之间建立有效的信任关系，为P2P网络奠定了安全基础，最后本文给出了SAP2P的参考实现．

The P2P network and its applications have the characters of dynamic and self-management, so the classic technologies do not solve the security issues of P2P network such as authentication, authorization and secure communication appropriately. In this paper, we propose a new trust management system called ExSPKI to solve the problem of establishing trust relation. Based on ExSPKI, a security architecture SAP2P （ Security Architecture of Peer to Peer Network） is proposed to build the trust relation between the security modules and solves the related security issues. This paper describes definition in ExSPKI and the composition and the protocol of the SAP2P. An implantation is discussed finally.