摘要 |
<p>A method for certifying public keys of a digital signature scheme in a secure communications system is provided. The secure communications system is one in which there are authorities with previously-certified public verification keys. The method begins by having a user U present an authority a verification key PKU. The authority then identifies the presenting user as U. Thereafter, the authority verifies that the presenting user knows the secret signing key associated with PKU. If so, the authority computes a digital signature S relative to the authority's own public key PKA of its verification that PKU is the public key of user U. The authority then issues a certificate that PKU is the public key of user U, the certificate including both S and a certificate for PKA.</p> |