577-財政部網路報繳稅.pptVIP

Certificate Authority gis90550 陳俊佑 Outline Public Key Usages CA GCA Public Key Usages Public Key Usages Trusted Third Party X.509 Authentication Service Part of X.500 directory service. Base on the use of public-key cryptography and digital signatures. It defined the certificate format and authentication protocols. Certificate ID card in internet Issued by CA Certificate acquisition Revocation of Certificates The CA must maintain a list consist of all revoked but not expired certificate issued by CA. When a user receives a certificate , the user must determine whether the certificate has been revoked. Users may maintain a CRL locally to avoid delay. GCA (Government Certificate Authority) 取得流程 1.至 .tw填寫自然人憑證申請， 並產生Key pair. 2.攜帶憑證磁片及身份證至服務窗口 （中華電信）辦理。 3.一天後可可啟用並可下載憑證。 4.驗證Public Key與Private Key是否成對。 GCA (Government Certificate Authority) GCA (Government Certificate Authority) 相關應用 財政部網路報繳稅 交通部電子公路監理 勞保局 現況： 憑證統計 憑證簽發總數：389388 憑證廢止總數：27149 * * (Alice,KUA) E(KUA ,M) Encryption Is KUA really Alice’s Public Key ? Alice Bob (Alice,KUA) Sig(KRA ,M) Verification of digital signature Is KUA really Alice’s Public Key ? Alice Bob Verify(KUA,Sig) I am Alice , my public Key is KUA. (Alice,KUA) Is KUA really Alice’s Public Key ? Yes Alice Bob (1) Generate KUA ,KRA pairs. (2) Alice , KUA ,ID proof Alice CA (3) Generate Sig(KRCA,Alice ,KUA) (4) Sig(KRCA,Alice ,KUA) CertA,CA=[Alice, KUA, Sig(KRCA, Alice, KUA)] *