基于公开密钥基础设施的专用数字证书服务-计算机应用技术专业论文.docxVIP

摘要摘要 摘要 摘要 随着电子商务、电子政务的迅速发展，人们从现实世界进入电子世界，网络 成为人们从事各种业务活动的重要渠道，因此构建一个安全、可信的网络环境受 到越来越多的重视。 世界各国经过多年的研究初步形成了一套全面的信息安全解决方案，即目前 被广泛采用的公开密钥基础设施(Pub¨c Key Infrastructure，PKI)。 本文在对PKl的技术、标准和实施进行深入研究的基础上，针对目前我国公 众CA所发放的数字证书不论是在证书内容上还是在证书的管理方式上都不能适 应不同企事业单位业务需求的现实情况，提出了专用数字证书服务，分析和设计 了一套专用数字证书服务系统，给出了专用数字证书服务在网上证券交易中的应 用案例。本文所论述的专用数字证书服务允许企事业单位向其内部网络和外部网 络用户发放数字证书，这些数字证书在功能上与公众cA发放的数字证书完全相 同，不同的是通过企事业单位与公众cA协定，在明确了双方的分工、责任和权 限的基础上，企事业单位可以自行确定安全策略、证书内容，自己公布证书撤销 列表，由企事业单位自己进行证书的前端管理而由公众cA负责后端核心的cA任 务。通过采用专用数字证书服务，企事业单位可以建立自己的网络信任环境，而 又不必在硬件和人员等方面耗费大量的财力和物力。 关键词公开密钥基础设施；认证中心；数字证书；专用数字证书服务 AbstractWith Abstract With the deVelopment of E—commerce and E—government，we have stepped into electronic world from real world． Most of the business has been carried out through Internet． So it becomes more and more imDortant how to create a trustable and security Internet environment． And many researchers have recognized and studied the problems in this field in recent years． After many years hard work they have developed a comprehensiVe security solution ‘Public Key Infrastructure’ (PKI)， which was widely accepted by the researchers in this field． In this paper we propose a conception about special digital certfftcate serVice， a九d we haVe deVeIoped a special digital certificate serVice system to implement it． We have also presented the application case on special digital certificate service for stock business on Internet The special digital certificate service in this paper allows enterprjse to sign digital certificate for the user not only in 10cal Intranet but als。in Internet．In addition to haVe the function of public certificate authority， it has some adVantages：Enterprise can make security p01icy and digital certificate content． Certificate can be managed by Enterprise，and creating or reVoking certificate is implemented at public certificate authority． Enterprise can establish a trustable network envjronment by employing special digital certificate service， whic