中文摘要：

公钥基础设施（PKI）可以为日益丰富的网络应用提供安全保障.但传统的PKI体系中,由于单一信息认证机构（CA）无法有效鉴别各类证书信息等原因,系统可能签发出包含不真实实体信息的数字证书.本文通过建立证书信息信任评估模型（IAEM）并进行分析,提出一种基于RSA算法的非集中式CA体系：RWTCA.该体系基于真实信任关系,构建在各证书信息权威认证机构之上,证书实体信息的真实性得到提高.同时,此类体系被证明可以应用于各类复杂的信任关系下.

英文摘要：

Public key infrastructure （PKI） provides a security guarantee for the rapid growing of network applications. However,in traditional PKI systems,for some reasons as the only trusted party CA verifies the entire end-entities＇ identity,it may issue certificates with spurious identity. By modeling the trust formula of certificate contents,authors present a new CA system based on RSA algorithm with non-centralized structure：RWTCA. The new system,based on real world trust relationship and built on some authorities of certificate contents,can issue standard X.509 certificates and has good reliability and flexibility.