Improvement of multiple CP/CPS based on level of assurance for campus PKI deployment
Shigeaki Tanimoto, Toshihiko Moriya, Hiroyuki Satō, Atsushi Kanai · 2015
The ICT environment has been rapidly developed by ubiquitization, and cloud computing and has become far more convenient to use. On the other hand, the negative side also exists, such as threats of viruses and unlawful access, in which the use of the safe and secure ICT environment is threatened. Public key infrastructure (PKI) construction is desired to achieve the safe and secure use of the ICT environment at universities. However, PKI has not been widely constructed in universities because of its cost. A previous study proposed multiple policies for core PKI operation. However, a dynamic evaluation that considers actual operation is not sufficient. In this paper, first, as a result of reexamining the conventional multiple-policy proposal in detail, an improvement plan is proposed from a viewpoint of the ease of introduction. Next, in addition to the conventional evaluation, dynamic evaluation based on real operation is performed, and effectiveness of the improvement plan is clarified.