| 摘要: |
| PKI系统是目前用户进行安全访问基础资源的重要设施, 通过公共的第三方认证来保障用户访问资源的安全. 随着PKI技术的逐步部署应用, 各类在部署应用中的安全问题也随之而来, 攻击者可以通过攻击PKI系统窃取用户信息和破坏用户访问. 从PKI的基本工作原理出发, 全面介绍PKI系统在实际部署应用中涉及的各个要素, 包括PKI架构、工作流程、证书、证书链、证书撤销、CI日志服务. 在PKI基本工作原理的基础上, 重点从PKI系统安全角度全面梳理和总结PKI系统工作过程中面临的安全问题, 包括PKI系统应用过程中面临的运营风险和技术风险、PKI系统的测量、风险检测及各类PKI系统的风险防范技术, 并对未来PKI领域的研究方向进行展望. |
| 关键词: 公钥基础设施 公钥基础设施安全 证书 证书透明度 |
| DOI：10.13328/j.cnki.jos.007305 |
| 分类号: |
| 基金项目:国家重点研发计划(2024YFB31NL00105); 国家自然科学基金青年科学基金(62102202); 广东省基础与应用基础研究重大项目(2019B030302002); 鹏城实验室重大攻关项目(PCL2023A05) |
|
| Research and Progress of PKI Technology |
|
ZHANG Bin1, ZHANG Yu1,2, ZHANG Wei-Zhe1,2, QIAO Yan-Chen1, LIU Xiang1, LIU Peng-Hui1
|
|
1.Pengcheng Laboratory, Shenzhen 518055, China;2.School of Cyberspace Science, Harbin Institute of Technology, Harbin 150001, China
|
| Abstract: |
| PKI system is currently an important facility for users to securely access basic resources. It ensures the security of users’ access to resources through public third-party authentication. With the gradual deployment and application of PKI technology, various security issues in deployment arise. Attackers can steal user information and disrupt user access by attacking the PKI system. This study starts from the basic working principle of PKI and comprehensively introduces all the elements involved in the practical deployment and application of the PKI system, including PKI architecture, workflow, certificates, certificate chains, certificate revocation, and CI log services. Based on the basic working principles of PKI, this study focuses on comprehensively sorting out and summarizing the security issues that the PKI system faces during its operation from the perspective of PKI system security, including operational and technical risks, measurement and risk detection of PKI system, and various risk prevention technologies for PKI systems. Finally, future research directions in the field of PKI are prospected. |
| Key words: public key infrastructure (PKI) public key infrastructure security certificate certificate transparency |
