774-資訊科學系.pptVIP

InfoSec Lab, NCTU CIS Public-key infrastructure:X.509 - Certificate 曾文貴 資訊科學系 交通大學 Authentication of public keys Public key usage: Encryption Authentication of public keys (cont.) Verification of a digital signature Authentication of public keys How does Bob know that the received key KUA (or KVA) is valid, i.e., “authentic”, “not revoked”, and “not expired” ? Authentication of public keys Off-line/on-line approach Directory service Directory A server or distributed set of servers that maintains a database of information about users. The database consists of user names and their corresponding information, such as network address (for email service, etc), public-key certificate, etc. ITU-T X.500 series: define a directory service X.509 Part of X.500 directory service Based on public-key encryption and digital signature Provide public-key certificates of users Define authentication protocols based on public-key certificates Used in S/MIME, IP security, SSL/TLS, SET, etc. CA (Certificate Authority) A CA is a trusted server that issues certificates. CA X has a private signing key KRX and a well-known verification key KVX corresponding to KRX There are a lot of CA’s, usually arranged in the tree structure CA (cont.) Certificate 網路身份證 A certificate is issued by a CA X A certificate of a user A consists of: The name of the issuer CA X his/her public key KUA the signature Sig(KRX, A, KUA) by the CA X the expiration date Range of application, such as, encryption/signature … Certificate acquisition Certificate (cont.) A certificate is put in the directory by the CA or by the user so that every one can query its data. The directory does not create the public key. It merely provides an easily accessible location for users to obtain certificates. Certificate format Certificate format (cont.) A real example Certificate elements Version: currently v2 and v3 Serial number: an integer value, unique with the issuing CA. Signature algorithm identifier: the algorithm used to sign