Analysis And Research Of Improved Nested Certificate System Based On PKI

Public Key infrastructure provides security server in the open Internet, using Public-key cryptography and digital signature. Public Key Infrastructure's purpose is managing public key and digital signature, which used in the open Internet, and establishing a secure and reliant network for configuration or corporation. In PKI, in order to validate a user entity, verifier must load a certificate chain, and verify the certificate chain using public key cryptography and digital signature, consequently get the public key of the user entity and prove his or her identity. However, because of the low efficiency of public key cryptography, time spent on verification the certificate path is too long for PKI's application.In this paper, NPKI is introduced in detail, and then the advantage and the disadvantage of NPKI are presented. In order to overcome the disadvantage of NPKI, a improved nested certificate based PKI (INPKI) is presented, followed by a presentation of INPKI's theory, and an analysis of INPKI's security using this kind of method : attack testing, and a discussion on principles of INPKI's certificate certification, and then formula and graph analytical performance evaluation of INPKI, compared with NPKI and PKI..