针对大规模分布式路由系统的安全保障问题 ,考虑到公钥密码系统在身份认证和密钥管理上的巨大成功 ,给出了一种基于公钥密码系统的安全机制。此安全机制去掉了一般安全系统中的密钥分配中心或者认证中心 ,因而减少了单一失效点 ,提高了系统的扩展性 ;同时分析了在这种机制中使用的密钥生成算法及其复杂性。此算法由各个分布的密钥生成器独立执行 ,在给定的约束条件下 ,可生成全系统唯一的包含强素数的 RSA密钥 Considering the great success of public key cryptosystems in authentication and key management, a security mechanism based on public key cryptosystem is proposed for the security of large-scale distributed routing systems. This security mechanism removes the key distribution center or the authentication center in the general security system, thus reducing the single failure point and improving the scalability of the system. At the same time, the key generation algorithm used in this mechanism and its complexity are analyzed . This algorithm is performed independently by the distributed key generators. Under given constraints, a unique system-wide RSA key with strong primes can be generated