Research On Survivability Enhancement For Military PKI Certificate System

With the deepening of informatization of the army, information transmission by using the Internet is becoming the key way to improve tactical command and the working efficiency in the army.How to ensure network security, solve the information security problems of network,has become the focus of the study in the military information construction process. PKI-based authentication system of military is the most comprehensive network security solutions. As most of the PKI systems, existing military PKI certificate system is centralized PKI technology,there are some problems about single point of failure, performance bottlenecks, a crisis of confidence,and so on. Moreover, to meet the complex needs of the application environment military PKI certificate system should have strong survivability.This paper analyzes the problems of the existing military PKI certificate system and it's survival needs, has research on trust models and P2P based survivability enhancement strategy.The following is the paper's main works and effors.First,this paper analyses and researches on the principle of PKI technology,and on the basis of comparative analysis between centralized PKI and decentralized PKI,and come to the problem of existing military PKI certificate system.Second,this paper analyzes the existing trust modes of PKI,and on the basis of the Beth trust mode,has made the Beth-based trust mode of PKI.Third,by analyzing the concept of survivability and the P2P storage technology,this paper makes a P2P-based PKI system, and through comparative analysis ,decides to adopt the BitVault technology as a data storage technology.Forth,this paper makes a P2P-based architecture of PKI,and has a detailed discussion on the achievement to the system,and analyzes the system's performance and evaluates the system's survivability,and then, sums up the characteristics of the PKI-based PKI system by compared it with the existing military PKI system.All these researches aim at enhancing the survivability of the military PKI certificate system, and use P2P-storage technology and trust calculation model in the PKI certificate system.Research shows that the P2P-based PKI certificate system can meet the application requirements about large-scale, high-performance and high-survivability.