基于IBCPK的证书管理系统的设计与实现

Design and Implementation of IBCPK-based Certificate Management System

基于标识的组合公钥算法是一种新型的公钥认证技术,解决了当前认证领域的规模化密钥管理以及信息验证的直接性问题。该文分析当前的公钥认证系统存在的问题,介绍基于标识的组合公钥算法的原理及构造方法,描述基于IBCPK的证书管理系统的设计与实现。该系统可以有效地管理IBCPK体系下的密钥分发与维护。

Because Public Key Infrastructure（PKI） has some defects in its basic theories, a novel authentication technology is urgently required to replace PKI in kinds of security domains. Compared with the PKI-based authentication systems which are widely used at present, Identity-Based Combined Public Key（IBCPK） algorithm has two advantages： validating information immediately and managing large numbers of keys effectively. In this article, IBCPK is presented and a certificate management system based on IBCPK is developed for managing the keys produced in IBCPK system. Additionally, the certificate is designed in a new architecture in order to meet the requirements of the key management in IBCPK system.