真实应用环境下的PKI信任模型

doi:10.7523/j.issn.2095-6134.2009.3.014

中国科学院大学学报 ›› 2009, Vol. 26 ›› Issue (3): 389-399.DOI: 10.7523/j.issn.2095-6134.2009.3.014

真实应用环境下的PKI信任模型

吴晶晶^1,2, 荆继武², 王跃武², 林璟锵², 刘怡聪²

1. 中国科学技术大学电子工程与信息科学系, 合肥 230027;
2. 中国科学院研究生院信息安全国家重点实验室, 北京 100049

收稿日期:2008-06-26 修回日期:2008-11-28 发布日期:2009-05-15
通讯作者: 吴晶晶
基金资助:
国家高技术研究发展计划(863)(2006AA01Z454)资助 

Trust model for Public Key Infrastructure in the real-world environment

WU Jing-Jing^1,2, JING Ji-Wu², WANG Yue-Wu², LIN Jing-Qiang², Liu Yi-Cong²

1. Department of Electronic Engineering and Information Science, University of Science and Technology of China, Hefei 230027, China;
2. State Key Lab. of Information Security, Graduate University of the Chinese Academy of Sciences, Beijing 100049, China

Received:2008-06-26 Revised:2008-11-28 Published:2009-05-15

摘要/Abstract

摘要：

通过为PKI系统建立信任模型,可以更好地了解这一复杂信任体系中各实体间信任关系建立的过程.在现有模型的基础上,引入更加符合真实应用环境的谓词逻辑和信任参数,扩展了原有模型信任推导方法,并给出了新方法下的认证规则和信任规则.同时结合信任度概率模型,分析了各代表性PKI架构信任传递的过程,以及系统架构对实体间信任度的影响.分析的结果对于构建真实应用环境下的PKI系统有一定指导意义.

关键词: PKI, 信任模型, 概率模型, 真实应用环境

Abstract:

Through reasoning about PKI trust model, researchers can learn more about the establishment and transfer of trust relationships in PKI systems. Based on the existing models, we proposed a set of trust logics with practical predications and trust parameters. By utilizing these logics, we have extended the derive formulas for entity's authentication and authorization and analyzed the relationship between PKI structure and trust probabilistic.

Key words: Public Key Infrastructure (PKI), trust model, probabilistic model, real-world environment

中图分类号:

TP393.08

吴晶晶, 荆继武, 王跃武, 林璟锵, 刘怡聪. 真实应用环境下的PKI信任模型[J]. 中国科学院大学学报, 2009, 26(3): 389-399.

WU Jing-Jing, JING Ji-Wu, WANG Yue-Wu, LIN Jing-Qiang, Liu Yi-Cong. Trust model for Public Key Infrastructure in the real-world environment[J]. , 2009, 26(3): 389-399.

参考文献

[1] Tarah A, Huitema C. Associating metrics to certification paths. In Computer Security. Springer-Verlag, 1992.175~189

[2] Beth T, Borcherding M, Klein B. Valuation of trust in open networks. In: Proceedings of the Conference on Computer Security. New York, Springer-Verlag, 1994.3~18

[3] Mended S, Huitema C. A new approach to the X 509 framework: Allowing a global authentication infrastructure without a global trust model; In: Proceedings of the Internet Society Symposium on Network and Distributed System Security. 1995

[4] Maurer U. Modeling a public-key infrastructure. In: Proceedings of the Conference on Computer Security, Lecture Notes in Computer Science,Berlin:Springer-Verlag,1996,1146:325~350

[5] Wreiter MK, Stubblebine SG. Resilient authentication using path independence. IEEE Transaction on Computers, 1998,47:1351~1362

[6] Howell J, Kotz D. A formal semantics for SPKI. In: Proceedings of the Sixth European Symposium on Research in Computer Security (ESORICS 2000). Lecture Notes in Computer Science, Springer-Verlag, 2000,1895:140~158

[7] Reiter MK, Stubblebine SG. Authentication metric analysis and design. ACM Transaction on Information and System Security, 1999,2(2):138~158

[8] Kohlas R, Maurer U. Reasoning about Public-Key certification: on binding between entities and Public Keys. Lecture Notes in Computer Science, Berlin:Springer-Verlag,1999,1648:86~103

[9] Marchesini J, Smith S. Modeling Public Key Infrastructures in the real world. In: Proceeding of EuroPKI 2005. Lecture Notes in Computer Science, Springer-Verlag, 2005,3545:118~134

[10] Liu HL, Zhang QSH, Wu JP. A conditional predicate calculus logic for PKI trust model analysis. Journal of China Institute of Communications, 2002,23(11):14~20 (in Chinese) 刘海龙,张其善,吴今培. PKI信任模型的条件谓词逻辑推理.通信学报,2002,23(11):14~20

[11] Bakkali EL, Kaitouni BI. A predicate calculus logic for the PKI trust model analysis. In: IEEE International Symposium on Network Computing and Applications. 2001.368~371

[12] Bakkali EL, Kaitouni BI. A logic-based reasoning about PKI trust model. In:Sixth IEEE Symposium on Computer and Communications. 2001. 42~48

[13] Bicakci K, Crispo B, Tanenbaum SA. How to incorporate revocation status information into the trust metrics for public-key certification. In:Proceedings of 2005 ACM Symposium on Applied Computing. 2005. 1594~1598

[14] Li NH, Feigenbaum J. Nonmonotonicity, user interfaces, and risk assessment in certificate revocation. Lecture Notes in Computer Science, Springer-Verlag, 2002,2339: 166~177

[15] Levien R, Aiken A. Attack-resistant trust metrics for public key certification. In:Proceedings of the 7th Conference on USENIX Security Symposium. 1998. 7: 18

真实应用环境下的PKI信任模型

Trust model for Public Key Infrastructure in the real-world environment

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 9

编辑推荐

Metrics

本文评价

访问统计

联系我们

[1]	王慧玲, 谢卓辰, 梁旭文. 单粒子翻转对神经网络的影响分析与优化[J]. 中国科学院大学学报, 2021, 38(6): 832-840.
[2]	王钧, 宇岩, 宫清华, 袁少雄, 陈军. 广东省山洪灾害分布特征及关键影响因素分析[J]. 中国科学院大学学报, 2021, 38(5): 611-623.
[3]	孙宇豪, 李国通, 张鸽. 一种基于相关概率模型的卫星异常检测方法[J]. 中国科学院大学学报, 2021, 38(3): 409-416.
[4]	蔡权伟, 林璟锵, 荆继武, 尚铭. PKI应用系统互操作性检测工具的设计与实现[J]. 中国科学院大学学报, 2012, (6): 799-804.
[5]	张帆, 顾青, 荆继武, 林璟锵, 査达仁. PKI系统的应用互操作评估[J]. 中国科学院大学学报, 2010, 27(6): 824-830.
[6]	贾素平，张玉清. P2P网络的认证方法研究（英文）[J]. 中国科学院大学学报, 2007, 24(6): 820-828.
[7]	唐明, 马颂德. 图像的增强与分割方法研究(英文)[J]. 中国科学院大学学报, 2004, 21(1): 140-143.
[8]	孙林红, 叶顶锋, 冯登国. 无线PKI体系的设计[J]. 中国科学院大学学报, 2002, 19(3): 223-228.
[9]	张凯, 荆继武. CA系统在网络银行中的应用[J]. 中国科学院大学学报, 2001, 18(2): 173-176.