对等网信任管理模型及安全凭证回收方法的研究

The Study of P2P Trust Management Model and Certificate Revocation Approach

从P2P网络开放性、分布性、动态性等特点出发,给出P2P环境下基于信任值的信任管理模型.针对安全凭证的回收问题结合P2P网络的特点,提出了安全凭证状态信息发布方法HYBIRD和基于BloomFilter的安全凭证有效性确认方法.实现了基于BloomFilter的CRL压缩向量的有效广播,从而减少了安全凭证回收中节点瓶颈现象的发生.

Because of the open, distributed and dynamic character of Peer-to-Peer（P2P）, the security problem has become more difficult. It is significant to accomplish reasonable access control to resource in network. This paper proposes a trust management mode based on subjective trust value among entities for establishing initial trust relationship among entities and supporting authorization considering entities trust value. To accomplish certificate revocation, the authors provide revocation information publishing algorithm HYBRID and a method based on Bloom Filter vector to judge certificate validity. Experiments show the good performance of the proposed approaches.