一种PKI系统中CA间信任度的动态评估方法

A dynamic evaluating method of confidence within CA in PKI system

在公钥基础设施PK I中,认证中心基本上都是树状结构,这种结构一方面在交叉认证时都需要经过根认证中心,证书路径较长且根认证中心将是系统信任的核心,一旦根认证中心出现信任危机,将导致整个系统的信任危机.本文尝试的提出一种动态的CA间的信任度评估方法来解决此类问题.

In public key infrastructure PKI, certification authorities are basically tree structure. This need through root CA, when cross - certification. Certification path is too long and CA is the heart of system confidence. As soon as CA comes across confidence crisis, it will lead to a confidence crisis of whole system. In this paper, we propose a dynamic evaluating method of confidence within CA to solve such problem.