一种树型桥CA跨域信任传递模型研究

摘要

At present, there are many certification authorities (CAs) in China, which are very different in various aspects.The inter-domain trust transfer is becoming an increasingly difficult problem because of not compatibility and complexity.In view of this problem, a new trust model based on bridge is proposed in this paper.This model can transfer trust from different trust domain to others with high compatibility, and reduce the cost because of centralized control bridge CA.Analysis shows that this model has strong anti-interference ability and high efficiency of certification process.%我国的CA机构有多家,各家存在不同程度的差异,跨CA信任面临着兼容性差、不易管控等问题.针对这些难点,论文借鉴了传统的信任模型,提出了一种改进的桥接式跨域新模型.该模型的高兼容性能够保证不同的CA域进行信任传递,集中式管理桥CA能够减少管理成本.通过分析表明,与传统的桥CA模型相比,该模型具有较强的抗干扰能力、高效的认证流程.