信任委托证书图搜索研究

Delegation graph search algorithms based DAG in distributed trust management

分析了分布式信任管理的证书结构及证书授权模型,包括线性链式授权、门限授权、条件授权和复合证书授权等,探讨了不同模型下的证书表达与证书链处理机制,提出了基于有向无环图DAG的证书图结构,并对利用DAG表达证书图作出证明。在证书链的搜索算法中,通过对多重边的有向无环图用深度优先和广度优先算法结合实现对证书链的搜索,避免证书图中产生的环形链而导致低搜索效率问题。

Certification structures and delegation models in distributed trust management,including chain delegation,threshold delegation,conditional delegation and composed delegation relation,are introduced in this paper.A proof of describing a directed graph of certificate chain as a DAG （Directed Acyclic Graph） is given,which can avoid the cyclic path.Furthermore,an algorithm of certificate chain processing is presented,which searches the DAGs,and a DAG by depth-first-algorithm,and inter-DAGs by breadth-first-algorithm.