Research And Practice Of The PKI-based Accounting Authentication System For Campus Network

With Internet growing at a rapid speed,great attention has been drawn to the security problem.The authentication system based on public key cryptography has become an effective approach for the Internet security. The PKI(Public Key Infrastructure)based on ITU X.509 exactly fit for it.However,PKI faces a lot of technology and management problems because Internet is a complicated environment.If we want to develop an application based on it,we should do some research and revise the configuration of the application or do some customizing.The author has participated in designing and developing the authentication system for Tsinghua University campus network.On the basis of the PKI that campus network has adopted,the author understood the architecture of PKI and analyzed the working theory behind the PKI.On the other hand,the author focus on researching and advancing several different authorization method.According to the requirement of the campus accounting system.the author bring forward the technology of Agent and design the accounting authentication system for campus network with the aid of AC(Attribute Certificate).In this paper the architecture and principle of PKI are presented at first.As follow, We analyzed the accounting managgment of campus network.introduced several kinds of accounting method,and brought forward their shortcomings.After we summed up the security requirement of accounting system with the development of campus network,we talked something about the old authentication system for the campus network.On this condition,this paper gave emphasis on the authorization problem related with the PKI.In the end.this paper outlined the Accounting Authentication system for campus network that the author has designed with the aid of attribute certificate and agent technology.This system can solve the security problem of authenticationwith the aid of attribute certificate and agent technology.This system can solve the security problem of authentication for accounting system considerably,what is more,it also solve the authorization problem.