PKI(Public Key Infrastructure)的缺陷与新一代PKI的展望

Flaw of PKI and Prospect of New-generation PKI

PKI是目前唯一的较大规模已经投入实际运营的网络安全解决方案,大量的公司或个人都在极力提倡PKI的应用。探讨PKI的安全隐患,指出X.509和CRL的缺陷。同时,提出建设新一代PKI的建议并且给出了具体要求。

With the development of the Intemet, people have paid more and more attention to the security of network. PKI is only mass project which has been applied in practice and solves the problem of network security. Amounts of companies and individuals advocate the application of PKI. The paper discusses hidden trouble of PKI, points out the disadvantages of X. 509 and CRL. At the same time, the paper proposes a desire and concrete demands to establish the new- generation PKI.