摘要
在PKI与IBE这2种认证体制技术存在不足的基础上,介绍了认证体制CFL的研发背景、CFL的研发历史、CFL的专利包、CFL的技术优势.CFL的研究获得了专家们的认可,鉴定为具有国际领先水平.CFL认证体制的优势主要体现为具有应用去中心化、去存储化、一人一密、高安全根特性;CFL的软硬件载体拥有不怕偷、防丢失及防内鬼特性;CFL具有支持安全进程认证、现场认证、强制访问控制特性;CFL的建设投资和运维费用低.在CFL基础上可以进一步提供对网络中的信息系统的信息安全五性(机密性、完整性、可用性、可控性、可认证性)保护.同时介绍了现有的CFL产品以及在研产品.最后阐述了CFL认证体制与区块链的关系.
Based on the technical shortcomings of two kinds of authentication systems of PKI and IBE, this paper introduces the authentication system of CFL about development backgrounds , history,patents and its technology advantages,such as decentralization,destorilization,one person one key,root’s high security. CFL’s Ukey has not afraid to steal. The technology properties of CFL authentication system also included process to process high security authentication within a machine, high security the scene to authenticate, mandatory access control features and etc. This paper presents the products of CFL, and those under research. With the help of CFL,it can be provided further information in the network information system high security protection about confidentiality, integrity,availability, controllability and certification. Finally , the relationship between the CFL authentication system and the blockchain is discussed.
出处
《信息安全研究》
2017年第3期220-226,共7页
Journal of Information Security Research
基金
山东科技大学2016年公派访问学者资助项目
