電子政務(wù)中基于x.509的證書認(rèn)證中心的設(shè)計(jì)與分析研究

1、湖南大學(xué)碩士學(xué)位論文電子政務(wù)中基于 X.509的證書認(rèn)證中心的設(shè)計(jì)與分析研究姓名：張南申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：控制工程指導(dǎo)教師：張大方;廖鋼20051030工程碩士學(xué)位論文 - II -Abstract For the swift developing of computer network technology, people can communicate in a convenient and rapid way. However

2、, because of the open design of computer network, when people profit from the advantages brought by the network technology, they have to confront the increasingly serious problems on information security. It's a grea

3、t challenge for all countries to fulfill the integrality, confidentiality and non-repudiation of datain an open network when they plan to push E-business forward and develop their network industries. Public key cryptogra

4、phy, combined with the traditional symmetric cryptograph and the message digest technology, can provide confidentiality, integrity and proof of origin. It's the foundation of many secure applications. In order to app

5、ly public key cryptograp in a large scale, the Public Key lnfrastructure (PKI) is required to distribute and manage public keys. The kernel component of PKI is Certification Authority (CA), which is a trusted third party

6、 with responsibility for managing certificates in their lifecycles. so designing and realizing a CA system so as to ensure sensitive datum transferring becomes highly need urgently. This thesis analyzes the characteristi

7、cs of X.509-based PKI system, and elaborates the theory of authentication by means of public-key certification. Then pay much emphasis to certificate distribution and trust model in the designing of certificate authority

8、. The main body of this thesis details the software architecture, primary functional modules, data structures needed by the whole system. At the same time, this thesis discusses and finally establishes the material certi

9、ficate policies and CRL policies. Mechanism involving key creating and managing is realized absolutely through hardware: PCI and UKey. As to CA main key, it makes use of PCI card to produce and back up ; With user key

10、, all user key is managed by UKey. This eliminates natural safe defect of key system where key is created and managed through software. The test and the actual movement indicates, this CA center may fast and safe prod

11、uce user key and the certificate, simultaneously has highly effective and has the prompt characteristic regarding the certificate distribution, uses the double certificate mechanism better met the current electronic g