Based On A Pki Ca Certification System Design And Realization

With the development of Internet and Electronic Commerce, Web security is an important issue in Computer Science. It is necessary to apply some security technology to ensure security service of confidentiality, integrity, authentication and non-repudiation for the Internet application. As an infrastructure of the information security, Public Key Infrastructure (PKI) is a hot topic in the research field of computer security which is the basic framework of secure service and becoming the nuclear part of the whole secure architecture.PKI which is based on the public key encrypting system,combines many other technologies, such as digital certificate and digital signature etc. Certificate Authority is the key component of PKI. According to a serial of protocols and standads,it issues the standard X.509 certificate which bundle users' public key and users' other identification information, in order to apply it into the normal network activity and guarantees the validity and the security of user's network activity.The paper recommend the three popular algorithm in modern cryptology. On the base of cryptology, the paper particularly describes the content of the Public Key Infrastructure, discussing relevant technology of PKI thoroughly, making a profound study on the principle and realization of the authentication method of PKI and analysesing its security based on X.509.In the end, we discribe the design and realization of the digital campus CA system, and achieve a complete plat of certificate's issue and management.