摘要
为提高证书依赖方(Relying Party)对证书持有者(Subscriber)信任评价的准确度,提出一种改进的PKI可信度模型.通过引入密钥安全期和优化不可信因子,严格区分证书可信度和私钥可信度,提出对应的计算公式,并给出组合密钥可信度和平均密钥可信度的计算方法.针对单级CA信任模型,推导出平均证书可信度和平均私钥可信度.该模型将影响密钥可信度的多个关键因素统一体现在单个计算公式中,不仅能够适应多种PKI信任模型,同时为提高证书持有者信任评价的准确度提供计算依据.
In order to enhance accuracy of trust evaluation on subscribers （ or key holders ） by relying party, an improved trust-degree model for PKI is proposed. Through the introduction of key security period （KSP） and optimizing non-trust factor （NTF）, the trust degree between certificate and private-key is clearly distinguished with the corresponding calculating formulas proposed. Meanwhile, the calculating methods for combined key trust degree and average key trust degree are given herein. This model integrates several critical factors that influence trust degree of certificate and private-key into one single formula, thus providing better adaptability to a variety of PKI trust models as well as sound calculating basis for improving the accuracy of trust evaluating on subscribers.
出处
《小型微型计算机系统》
CSCD
北大核心
2012年第2期370-375,共6页
Journal of Chinese Computer Systems
基金
国家科技支撑计划项目(2008BAH22B03)资助
关键词
PKI
密钥安全期
不可信因子
可信度
模型
PKI
key security period （ KSP ）
non-trust factor （ NTF ）
trust degree
model
