基于路径发现的PKI扩展方法

An Expansion Method of PKI with Path Discovery

PKI的可扩展性主要是当证书服务用户的规模超出原有系统的容量时 ,能够通过增加 PKI管理实体的数量和层次来满足用户需求 ,并同时保证原有系统能够平滑地过渡到新的规模。本文探讨了 PKI管理域之内和之间可能的向下、平级和向上三种扩展方式 ,提出使用“路径发现”过程来减少PKI扩展时对端实体的影响 ,从而提高 PKI服务范围的可扩展性。

The expansibility of PKI is expected to have the features that when the amount of users exceeds the system capacity,the users' requirements can still be met by simply expanding the number of PKI entities and management levels,and this expansion can be achieved smoothly from the original system.The upward,downward,and horizontal expansions of PKI are discussed in this paper.A path discovery method is suggested to reduce the effect of PKI expansion on end entities so as to enhance the expansibility of PKI services.