PKI体系下的地图按需出版CA模型研究

Research on CA Model for Map On-Demand Publishing under PKI System

针对传统地图出版流程中所存在的问题,本研究提出地图按需出版机制,并为保证地图按需出版的数据安全,结合公钥基础设施(PKI)体系,将地图按需出版体系划分为多个信任域,根据每个信任域的组织结构特点,设计了与之相对应的域内认证中心(CA)模型,同时根据地图按需出版各个角色业务逻辑关系,设计了地图按需出版串桥CA模型,完成了对整个地图按需出版机制总体CA模型的构建,同时分析了模型的安全性与灵活性。本研究提出的模型为地图按需出版安全机制的实施提供了一定的参考。

Aiming at the problems in existing map publishing workflow, the map on-demand publishing mechanism was put forward in this study. In order to guarantee the data safety during map on-demand publishing, combined with the Public Key Infrastructure （PKI） system, the map on-demand publishing system was divided into multiple trust domains. According to the characteristics of the organizational structure of each trust domains, the corresponding domain CA model was designed. According to the business logic relationship of the roles of map on-demand publishing, the string bridge CA model was designed and the CA model for overall map on-demand publishing mechanism was completely setted up. At the same time, its security and scalability were analyzed. The model will provide the references for the implementation of the security mechanism of map on-demand publishing.