A novel approach to kernel construction of China bridge CA

This paper gives a general overview of the PKI interoperability efforts sighting the different interoperability models being used. It also gives a detailed analysis of the bridge certification authority (BCA), the favoured model in interoperability efforts in China. This paper presents a model using B-level lightweight security kernel (BSK) in China BCA framework. The BSK model is used to highlight kernel security level of China BCA implementation. BSK introduces security object model based three classes of objects and message dispatch model. It also presents the BSK message dispatch algorithm targeted for TCSEC class B1 or above to enforce performance adopting a route cache policy over all subjects and objects it controls.