A New Accessing and Storing Private Key Scheme
一种新的私钥安全存取方案*

To build an effective Public Key Infrastructure (PKI), a secure way of accessing and storing the users' private keys is very essential. The present paper proposes a new, secure scheme based on GQ(Guillou-Quisquater) identification scheme. It can not only corroborate the identity of a private key owner but enhance the confidentiality of the private key storage as well. The users' encrypted private keys are stored at Certificate Authority (CA). In order to avoid the different types of malicious attacks and to ensure the minimum information leak during the authentication process, the GQ identification scheme is used so that only the legal user can be verified and get his private key. In addition, to enhance the confidentiality of the private key storage and transmission, as soon as the legal user finishes using the private key, a new protective key will be reproduced. The private key encrypted by the new protective key will then be transmitted to CA again.