Local distributed CA system based on local PKI

摘要

The invention of the local area distributed certificate authority public key infrastructure (Locally distributed Certificate Authority, LdCA ) relates to the certificate creation and certificate verification method of the system. In the present invention generates a certificate with the certificate Local_Cert Cert_List table was a conventional short X.509v3. The present invention is a user, the local CA, comprising a directory server, an authentication system of a hierarchical public key infrastructure, the local CA is to generate the user's public key / private key pair, and to apply for a certificate public key / private key means for generating and the means to generate certificates at the request of the user (user) to issue to the user, retrieve the certificate of the revoked certificate Cert_List information table recorded in the certificate revocation date entry and update the table information Cert_List including the means, and the directory server is a place to store and search the certificate and the user-related information, such as the cross-certificate and CRL pair, characterized in that it is controlled by the local CA.