基于PKI的电子商务安全密钥托管方案研究

A Scheme of Secure Key Escrow in Electronic Commerce Based on PKI

从保护用户托管私钥安全性与防止用户逃避密钥托管的角度出发，提出数字证书应与密钥托管机联系，给出一种基于离散对数的密钥托管方案。另外还描述了通信双方的操作过程以及政府职能部门在密钥托管机构的帮助下强制访问的步骤。

To prevent the user from evading key eserow and protect the eserowed private key, we establish some relationshipbetween the digital certificate and the escrowed key. An eserow scheme based on discrete logarithm is Presented. We also describe theoperation process of sending and receiving message of the user. and how the government can obtain the plain text from the ciphertextwith the help of Eserow Agent.