【Hyperledger Fabric】Identity-什么是PKIs

What are PKIs?

什么是PKIs？

A public key infrastructure (PKI) is a collection of internet technologies that provides secure communications in a network. It’s PKI that puts the S in HTTPS – and if you’re reading this documentation on a web browser, you’re probably using a PKI to make sure it comes from a verified source.

一个公钥基础设施是指在一个网络中互联网技术提供的安全交流的集合。HTTPS中的S来自PKI——如果你正在浏览器上阅读这个文档，你可能正在使用一个PKI来确保文档来源可靠。

*The elements of Public Key Infrastructure (PKI). A PKI is comprised of Certificate Authorities who issue digital certificates to parties (e.g., users of a service, service provider), who then use them to authenticate themselves in the messages they exchange with their environment. A CA’s Certificate Revocation List (CRL) constitutes a reference for the certificates that are no longer valid. Revocation of a certificate can happen for a number of reasons. For example, a certificate may be revoked because the cryptographic private material associated to the certificate has been exposed.

PKI有证书授权中心（Certificate Authority）、证书撤销列表（certificate revocation list）构成。证书授权中心给群体（parties）（例如：某个服务的使用者、服务提供者）签发证书，然后群体（parties）在交换他们的环境的消息中用这些证书来证明自己。证书撤销表由无效的证书构成。证书撤销的原因有很多种，例如证书种加密私有的讯息被暴露了。

Although a blockchain network is more than a communications network, it relies on the PKI standard to ensure secure communication between various network participants, and to ensure that messages posted on the blockchain are properly authenticated. It’s therefore really important to understand the basics of PKI and then why MSPs are so important.

There are four key elements to PKI:

PKI有4个基本要素：

• Digital Certificates
• 数码证书
• Public and Private Keys
• 公共密钥和私有密钥
• Certificate Authorities
• 证书授权中心
• Certificate Revocation Lists
• 证书撤销列表