基于安全证书的PKI解决方案

PKI Solution Based on Security Certificate

通过对PKI密码技术的各种证书组成的证书链漏洞进行密码分析,公开了黑客可能针对PKI密码技术安全漏洞实施攻击的具体方法。同时,针对PKI密码技术漏洞也提出了一种基于安全证书的PKI解决方案,即采用加密卡(或加密机)硬件设备和组合密钥技术,将CA认证中心的各种CA证书分别加密成密文存储,或以明文形式存储在加密芯片里,保证各种CA认证中心的安全协议在加密芯片里实现,从而建立基于安全加密"芯片级"的PKI安全协议。

This paper provides a solution based on the security certificates for PKI technology.The solution makes use of the encrypt card(or cipher machine)and the CSK(Combined Symmetric Key)technology to store the CA certificates as cipher in disk or as plain text in chip.At the same time,it ensures that all the security protocols in CA center be realized in chip,so the chip-based PKI security protocol is built.