基于属性的私有密钥证书的安全框架及其实现

为了防止非法用户访问合法的资源,分析了当前已有安全协议标准中存在的问题,提出了一种含有属性的私有密钥证书,该证书可自由存放,操作简便,达到了防止攻击的目的,实现了对证书的安全管理.给出了使用具有权限和服务类型属性的证书所实现的鉴别过程.该方案已经用于计算机网络系统中.

Security Frame of Private Key Certificate Based on Attribute and Its Realization

In order to prevent illegal users from visiting legal resource, the authors analyze the problems existing in the standard of security protocol and put forward a private key certificate contain attribute. This certificate can be deposited freely and its operation be reduced, which prevent it from being attacked and realize its secure management. The authors give the identification process realized by the certificate with the attribute of both jurisdiction and service type. This scheme has been applied to the system of computer network.