A new key escrow scheme is proposed on the basis of digital certificate,in which only trust certificate authority (CA)is need for user and legal executive department,therefore the management is greatly simplified.In addition,our scheme has advantage that