Public Key Infrastructure A Tutorial - Department Of Computer 公开密钥基础设施的一个教程-计算机系.ppt

Public Key Infrastructure: A Tutorial Ravi Mukkamala Department of Computer Science Old Dominion University Norfolk, Virginia, USA mukka@ ORGANIZATION Introduction PKI Architectures Revocation Modes of deployment PKI Alternatives Wireless PKI References INTRODUCTION Enterprise PKI Why PKI? PKI is not the goal Scalable security services are the goal PKI supports scalable security services using public key cryptography What is PKI? Public/Private key pair The public key is a string of bits A public key certificate answers the following questions (and many more) ? Whose certificate is it? ? What can it be used for? ? Is it still valid? ? Example uses: – Is this really the key for Jack Nathan? – Can this key be used to send an encrypted message to John Smith? – Was the key used for digitally signing this document valid at the time of signing? Fetch me the key of Mike Jones Security Services That Can BeSupported By PKI Authentication - Ability to verify the identity of an entity Confidentiality - Protection of information from unauthorized disclosure Data Integrity - Protection of information from undetected modification Non-repudiation - Prevention of an entity from denying previous actions Key estalishment A Fully Functional PKI Certification authority Certificate repository Certificate revocation Key backup and recovery Automatic key update Key history management Cross-certification Support for non-repudiation Time stamping Client software Secret Key Cryptography Classical form of cryptography Single key used to encrypt and decrypt data Strengths –Very fast relative to public key cryptography –Relatively short keys Weakness: Key must be shared among interested parties Public Key Cryptography ? Each entity has a PAIR of mathematically related keys – Private Key - known by ONE – Public Key - known by Many Not feasible to determine Private Key from Public Key Strength – no shared private keys Weakness – Relatively slow – Requires longer keys for