【摘要】 为解决PK I信任体系互联互通问题,在对比分析现有PK I常用5种信任模型优缺点的基础上,借鉴已有信任模型,特别是桥CA模型的优点,提出了一个新的模型——多级桥CA信任(m u ltileve l bridge certificate au thority,M BCA)模型.阐述了多级桥CA信任模型的基本原理及其构建方法,给出了其总体架构;在总体框架下,对其原型系统中LDAP服务器进行了设计;并结合具体项目对方案的可行性进行了实验验证和分析.实验证明了该模型的可行性,有望对我国PK I建设工程有所帮助.更多还原

【Abstract】 In order to solve the problem of mutual communication of PKI trust system based on the comparison of five trust models commonly used in PKI and with reference to the advantages of these models,especially the bridge CA model,a new model— multilevel bridge certificate authority(MBCA) model,is constructed.The basic principle and building method of MBCA model are given,and the framework of the model is described,then the LDAP server of pro-system is designed.The feasibility is analyzed and tested with actual project.It is helpful to our country′s PKI project model.更多还原