| 摘要 |
<p>A first device (102,200,500) with a changing identity establishes a secure connection with a second device (104,106,250,600) in a network (100) by acting as its own certificate authority. The first device issues itself a self-signed root certificate (112,206,518) that binds an identity of the first device to a long-term public key (204,516) of the first device. The root certificate is digitally signed using a long-term private key (202,514), where the long-term public key and the long-term private key form a public/private key pair. The first device provides its root certificate to the second device in any trusted manner. The first device can then create a certificate (130,220,534) for one or more short-term identities (132) acquired by the first device and sign the newly-created certificate using the long-term private key. The first device can authenticate itself to the second device by sending the newly-created certificate to the second device.</p> |
