| 摘要 |
<p>Key distribution system for public key certificates. By a user A, registered at a server SV1, the public key of a user Y, registered at a server SV3, can be calculated from a public key of user Y signed with the secret key of SV3 ({Pky}SKsv3), a number of cross-certificates ({PKsv3}SKsv2, {PKsv2}SKsv1), and the public key (PKsv1) of server SV1. If the user must perform such a calculation himself, that would impose a substantial load on the processing capacity of his terminal. As an improvement, it is suggested, as a service to the users, to let the servers generate key certificates of external users not registered at the same server. The key certificates are thereto recertified into certificates which are digitally signed with the aid of the SK of the own server SV1 ({PKx}SKsv1) and are made available to the local users on request.</p> |
