基于CPK的密钥管理系统设计

摘要

In the process of key management,under the precondition of guaranteeing the security,it is ex-pected to achieve the goal that reducing round trips, total bandwidth and communication entity's computa-tion. Aiming at this problem, combined public key(CPK) is proposed to provide effective means. This pa-per introduces the fundamental of CPK briefly, summarizes the CPK elements and points out that it should be paid much attention on designing CPK-based key management system. Then the paper gives a CPK-based key management system demonstration, describes its working flow, and analyzes several security questions that might be faced in designing CPK-based key management.%密钥管理过程中，在保证安全性的前提下减少通信双方的交互步骤、交互数据量，以及通信实体的运算量是人们期望达到的目标。对于此问题，组合公钥( CPK)可以提供比较有效的解决途径。简单介绍CPK的基本原理，总结设计基于CPK的密钥管理系统应关注的CPK要素和需注意的事项，给出一个基于CPK的密钥管理系统实例，描述其工作流程，并重点分析设计基于CPK的密钥管理系统会遇到的几个安全问题。