收稿日期: 2010-03-02
网络出版日期: 2010-11-15
基金资助
信息安全国家标准制修订工作项目《PKI系统互操作性评估准则》和电子信息产业发展基金资助
PKI application interoperability evaluation
Received date: 2010-03-02
Online published: 2010-11-15
张帆 , 顾青 , 荆继武 , 林璟锵 , 査达仁 . PKI系统的应用互操作评估[J]. 中国科学院大学学报, 2010 , 27(6) : 824 -830 . DOI: 10.7523/j.issn.2095-6134.2010.6.014
In this paper we describe the development of PKI interoperation and analyze the differences between interoperability of PKI transaction and interoperability of PKI entity. We propose a new model of PKI evaluation, which can be used to evaluate the interoperability of PKI entity. The model represents a way to promote interoperability of PKI entity and can be used to construct PKI entity with total interoperability.
Key words： PKI; interoperability; evaluation
[1] ITU-T. Recommendation X.509: Information technology -open systems interconnection - the directory: authentication framework
[S].2005:08/05.
[2] Cooper D, Santesson S, Farrell S W, et al. Internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile
[S]. RFC5280.2008-05.
[3] Myers M, Ankney A, Malpani A, et al. X.509 internet public ley onfrastructure online certificate status protocol
[S]. RFC 2560. 1999-06.
[4] Chokhani S, Ford W, Sabett R. Internet X.509 public key infrastructure certificate policy and certification practices framework. RFC3647. 2003:11.
[5] 公钥密码系列标准 . http://www.rsa.com/rsalabs/node.asp?id=2124.
[6] Steven L. PKI interoperability framework . . http :// www.pkiforum.org/pdfs/PKIInteroperabilityFramework.pdf.
[7] Burr W, Dodson, Nazario N, et al. Minimum interoperability specification for PKI components, Version 1
[S]. NIST Special Publication, 1998.
[8] 冯登国,吴志刚,荆继武.PKI组件最小互操作规范
[S].国家标准GB/T 19771-2005.
[9] 电子认证服务许可证 . . http://www.miit.gov.cn/ n11293472/n11294912/n11296542/12126363.html.
[10] 国家信任源根CA中心 . . http://www.rootca.gov.cn/
[11] Microsoft root certificate program . . http://www.microsoft.com/
[12] WebTrust . . http://webtrust.net/
[13] Federal bridge CA . . http://www.cio.gov/fbca/
[14] European bridge-CA . . http://www.bridge-ca.org/
[15] Institute of Electrical and Electronics Engineers. IEEE standard computer dictionary: A compilation of IEEE standard computer glossaries
[M]. New York:NY,1990.
[16] Common criteria . . http://standards.iso.org/ittf/PubliclyAvailableStandards/c040612_ISO_IEC_15408-1_2005(E).zip.
[17] Polk W, Housley R, Bassham L. Algorithms and identifiers for the internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile
[S].RFC3279. 2002.
/
| 〈 |
|
〉 |
