Trust Problem in PKI Application and Its Secure Solution
Hongzhou Ning · Zhongguo anquan kexue xuebao · 2007
The substitution principle,method and process of trusted certificates and the problem of wrong trust are detailed in this paper.By analysis,the secure length of certificates chain is less than 3.But in actual application,the length of certificates chain is at least 3 for the requirement of business and security.Aiming at this problem,a secure solution is provided,which uses physical trust point to substitute logic trust point to avoid trust certificates substitution by combining USBKEY,a kind of hardware for storing personal certificate with certificates chain.This solution builds up a secure and reliable network trust environment for users.