面向ca 的电子印章系统设计与实现.pdfVIP

25 1 JOURNAL OF NATIONAL UNIVERSIT YOFDEFENSETECHNOLOG Vol.25 No.12003 :1001- 2486(2003)01- 0026- 05 X CA 1 2 2 2 刘世栋 , 杨 林 ,侯 滨 , 王建新 (11 , 210016;21 61, 100039) :, PKI , , CA , CA CA ,, :; ;; ; :TP393.08 :A Design andRealization of the Secure CA-basedElectronic Seal System 1 2 2 2 LIU Sh-i dong ,YANG Lin , HOU Bin , WANG Jian-xin (11College of CommunicationTechnology, PLA, Nanjing 210016,China;2.TheSixty-first Academy, GeneralStaff, Beijing 100039,China) Abstract:To solvethedistributedhierarchicalnetwork security problems, a distributedsimple strictly hierarchical(DSSH) PKI trust modelispresented. Thismodelprovideseffectivenetworksecurity servicessuchasauthentication, accesscontrol, in- tegrity, confidentiality, non-repudiationandsoon. Onthebasis ofthetrust model, the concept of theissue-sealcertificationis presentedandestablishedto ensure thesecurity of the sealfile in the CA domain. Thesystem implements the digitalsignature andverification of the electronic documentsby the electronic seal. The key, which encrypts and decrypts the electronic docu- ments, isprotectedby theencryption certification. Finally, the system implements the management of printing sealfilesabil-i tiesthroughthe authority server. Key words: network security; domain; Certificate Authority (CA); Register Authority (RA); electronicseal ,Internet , , , (PublicKey Infrastructure,PKI) , PKI , [1] 1 , , PKI X.509 ,KDC , , ,KDC , , , , [2,3] PKI PKI , ITU-T X.50