一种PKI体系下的私钥安全存取方案

An Accessing and Storing Private Key Security Scheme Under PKI

针对私钥安全存取问题,提出了一种私钥安全存取方案。该方案引入了私钥托管箱技术,为私钥的集中管理和私钥的漫游提供了保证;引入的门限技术避免了私钥托管箱单点服务失败造成私钥丢失的问题,同时防范了私钥托管箱服务器系统内部的攻击;采用加强口令的身份认证方案进一步为私钥访问和传输提供了安全保证。

For private key security issues, an accessing and storing the private key security scheme is advanced. This scheme introduces private key safe technology, which makes it possible to manage and roam private key; This scheme introduces threshod technology, which avoids private key losing caused by the failure of single point of servic, and is also against attacking internally by private key safes system. This strengthening password algorithm about user authentication provides security guarantees private key security on the procedure of accessing and transmision.