一种基于门限ECC的PKI/CA模型的设计

随着电子商务的发展,如何实现对网络用户的身份认证成为了一个非常迫切的问题,目前广泛采用的是基于PKI的认证技术,而在PKI认证体系中,认证中心CA是核心部分。本文提出了一个基于门限ECC的PKI/CA的设计,本方案在传统的CA方案上引入了入侵容忍机制,结合椭圆曲线密码体制和门限密码方案,提高了CA系统的可靠性和安全性。

A PKI/CA Model Design Based on Threshold and ECC

With the development of electronic commerce,how to implement the authentication of users on the Internet has become a very pressing issue,PKI authentication technology is used widely now,the certification authority(CA) is the core part of the PKI certification system.A PKI/CA design based on threshold and ECC is proposed in this article,the program is different from traditional program for the introduction of intrusion tolerance and combined with the elliptic curve cryptosystem and threshold to improve the reliability and security of CA system.