互联网在日本的发展趋势(ppt 93).ppt

Privacy-Enhanced Mail(PEM) DES DES RSA RSA 1. Encrypt a message with a data encryption key(DES) 2. “A” encrypts the data encryption key with “B”’s public key. (RSA) 3. “B” decrypts the data encryption key with “B”’s private key.(RSA) 4. “B” decrypts the message with the decrypted data encryption key(DES) Hello! ?!*# B’s public key B’s private key Data Encryption Key A B Hello! Data Encryption Key * Digital Signature RSA RSA 1. “A” creates a message digest(MD). 2. “A” encrypts the MD with “A”’s private key(RSA). Digital Signature 3. “B” decrypts the MD with “A”’s public key(RSA) and restore the MD. 4. “B” creates a message digest using the message that “B” received separately. 5. Compare the restored MD and the MD that “B” created. ?!*# A’s public key A’s private key A B Create Message Digest Compare Hello! Hello! A Message Digest(MD) Message Digest(MD) Hello A Create Message Digest Hello! * Spoofing Purchase Order I am A. A A B B Invalid signature Invoice To: A This is A’s public key. ??? A B 1. Person “B” pretends to be Person “A” using B’s private and public keys. 2. “B” places an order with a forged signature. 3. Seller’s authentication system understands “A” placed the order and sends an invoice to “A”. Authentication System * W Certificate Authority RSA RSA A W A A A W W Certificate A B CA(Certificate Authority) W CA’s private key CA’s public key Digital Signature Registration 1. Sender “A” registers his public key to the CA. 2. The CA creates a digital signature with its private key and issues a certificate. 3. If Receiver “B” can decrypt the certificate with the CA’s public key, it is authentic. * Troubles Related to Internet Use Posting harmful messages to BBS Damage someone’s reputation or credibility Spam mail(unsolicited bulk mail) Problems related to home page content Pornography Infringement of third party’s copyright, trademark Invasion of privacy Unlawful business * Domain Name Disputes Collision of domain name Shor