PKI technology is the key to address some problems on interoperability of different PKI architecture and efficiently build certification paths. By analyzing several existing PKI trust model, this paper proposes a new PKI trust model that based on an improved CAN resource locating model. The new trust model can achieve safer, more effective cross domain authentication. The paper focuses on the number of possible routes between domains, and the time required for path construction.