PKI安全性分析

Security Analysis on PKI

公开密钥基础设施(PKI)是目前能够解决大规模网络安全问题的可行方案,但PKI客观存在一些安全缺陷应引起重视。文中分析了PKI使用过程中各个环节的安全问题,包括PKI的配套政策、策略标准、用户使用过程、X.509证书体系以及计算机技术、公开密钥技术等,介绍了这些缺陷的存在或表现形式,提出了相应的解决方案,指出要以发展的眼光去看待公钥技术和PKI。

It becomes more and more popular to settle information security problems with PKI （Public Key Infrastructure） on the large scale network, but there are some pitfalls in the current PKI solutions. This paper introduces basic structure, evaluation standard, Public-key cryptography,X. 509 standard and major design problems of PKI. The security problems in the process of applying PKI are discussed. And some solutions of these problems are given also.