Application of public key infrastructure in telecom operators

Congli WANG; Jinhua WANG; Weijia XUE

doi:10.11959/j.issn.1000-0801.2020292

您当前的位置：

首页 >

文章列表页 >

Application of public key infrastructure in telecom operators

Topic:Information Security | 更新时间：2024-06-05

- Application of public key infrastructure in telecom operators
- Telecommunications Science Vol. 36, Issue 11, Pages: 98-103(2020)
- 作者机构：
  
  1. 中国电信股份有限公司研究院，上海 201315
  2. 移动互联网系统与应用安全国家工程实验室，上海 201315
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2020292
  CLC： TP393
- Published Online：2020-11，
  
  Published：20 November 2020
- 稿件说明：
移动端阅览
Congli WANG, Jinhua WANG, Weijia XUE. Application of public key infrastructure in telecom operators[J]. Telecommunications science, 2020, 36(11): 98-103.
DOI：

Congli WANG, Jinhua WANG, Weijia XUE. Application of public key infrastructure in telecom operators[J]. Telecommunications science, 2020, 36(11): 98-103. DOI： 10.11959/j.issn.1000-0801.2020292.

摘要

随着密码法的实施，我国将信息系统密码应用提升到了法律层面，要求加强公钥基础设施在网络实体互通互信方面的应用。提出了一种采用严格层次结构建设统一电信公钥基础设施的方案，即建立一个全国电信运营商根CA作为信任锚，而各大电信运营商成为独立的子CA，形成“全国电信运营商根CA－电信运营商子CA”的证书信任链，提供PKI安全服务。该方案不仅可以实现电信运营商CA之间的互通互认，也有利于统一电信公钥基础设施成为全球范围信任的电子认证服务提供商，进而在国际证书标准制定上有更大的影响力和话语权。

Abstract

With the implementation of cryptography law

the application of cryptography in information system in China has been promoted to the legal level

which requires the application of public key infrastructure in the mutual trust of network entities to be strengthened.A scheme of constructing unified telecom public key infrastructure with strict hierarchical structure was proposed

that is

establishing a national telecom root CA as a trust anchor

and each major telecom operator becomes an independent sub-ca

forming a certificate trust chain of “national telecom root CA- telecom operator sub-ca” and providing PKI security services.This scheme can not only realize the mutual recognition between telecom operators

but also help unify the telecom public key infrastructure to become a globally trusted electronic authentication service provider

so as to have more influence and say in the formulation of international certification standards.

关键词

Keywords

references

全国信息安全标准化技术委员会 . 证书认证系统密码相关安全技术规范:GB/T 25056-2018 [S ] . 2018 .

National Information Security Standardization Technical Committee . Specifications of cryptograph and related security technology for certificate authentication system:GB/T 250562018 [S ] . 2018 .

国家密码管理局 . 信息系统密码应用基本要求:GM/T 0054-2018 [S ] . 2019 .

State Cryptography Administration . General requirements for information system cryptography application:GM/T 0054-2018 [S ] . 2019 .

Google Security Blog . Sustaining digital certificate security [EB ] .2015-10-28.

RYAN S . Intent to deprecate and remove:trust in existing symantec-issued certificates [EB ] .2017-03-24.

DARIN F . Intent to deprecate and remove:Trust in existing symantec-issued certificates [EB ] .2017-03-24.

IVAN R . Monitoring of symantec certificates [EB ] .2017-08-15.

Wikipedia . Flame (malware) [EB ] .2018-11-21.

中华人民共和国工业和信息化部 . 获得电子认证服务行政许可的认证机构名单 [EB ] .2014-04-09.

Ministry of Industry and Information Technology of the People's Republic of China . List of certificate authorities that have obtained administrative license for electronic certification services [EB ] .2014-04-09.

Cloudflare . Merkle town explore the certificate transparency ecosystem [EB ] .2020-02-23.

CA/Browser forum [EB ] .2020-02-23.

中华人民共和国公安部 . 公共安全视频监控联网信息安全技术要求:GB 35114-2017 [EB ] .2017-11-01.

The Ministry of Public Security of the People’s Republic of China . Technical requirements for information security of video surveillance network system for public security:GB 351142017 [EB ] .2017-11-01.

薛淼 , 刘千仞 , 符刚 , 等 . 区块链在电信运营商应用场景的探讨 [J ] . 邮电设计技术 , 2019 ( 4 ): 76 - 80 .

XUE M , LIU Q R , FU G , et al . Discussion on the application scenarios of blockchain in telecom operator [J ] . Designing Techniques of Posts and Telecommunications , 2019 ( 4 ): 76 - 80 .

庞松涛 . 基于公钥密码体制的网络认证技术 [J ] . 电信科学 , 2016 , 32 ( 2 ): 170 - 174 .

PANG S T . Network authentication technology based on public key system [J ] . Telecommunications Science , 2016 , 32 ( 2 ): 170 - 174 .

刘冰洋 , 杨飞 , 任首首 , 等 . 去中心化互联网基础设施 [J ] . 电信科学 , 2019 , 35 ( 8 ): 74 - 87 .

LIU B Y , YANG F , REN S S , et al . Decentralized internet infrastructure [J ] . Telecommunications Science , 2019 , 35 ( 8 ): 74 - 87 .

全国信息安全标准化技术委员会 . 汽车电子网络安全标准化白皮书 [R ] . 2018 .

National Information Security Standardization Technical Committee . White paper on automotive electronic network safety standardization [EB ] . 2018 .

中华人民共和国工业和信息化部 . 电子认证服务管理办法 [R ] . 2009 .

Ministry of Industry and Information Technology of the People’s Republic of China . Measures for the administration of electronic authentication services [EB ] . 2009 .

Views

294

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research on digital twin network capability maturity model of telecom operators

Research and application exploration of threat intelligence system of telecom operators

Analysis of telecom operators’ IoT strategy from the perspective of 2G/3G transition

Application of blockchain in telecom operators

A comparative analysis of the development modes of the IoT for telecom operators

Related Author

Jianhong XU

Shanshan LI

Zhifei LIU

Tao LI

Yongjian ZHAO

Haitao ZHANG

Yi JIANG

Shijie ZHU

Related Institution

Product Center of China China United Network Communications Group Co.,Ltd.

Research Institute of China United Network Communications Co., Ltd.

The Chinese People’s Liberation Army (PLA) University of Science and Technology

Zhejiang Police College

Huaxin Design Consulting Institute

⁰