| This paPer has analyzed the PKIX(Public Key Infrastructure basedon X.509 standard) digital certificate authority mechanism, and hasdiscussed the esPKIX, a platform independent and Java implementedEssential PKIX, and its implementation. It covers the design thought inthe phases of certificate request, issuance and revocation. In the currentimplementation, esPKIX operates under on-line CA mode and thereforeimplements the request, issuance and revocation of X.509 v3 certificateon Intemet. It also supports the function of CRL v2 and other relatedfunctions of administration. Some standard extensions of certificate/CRLand PKCS#8 encoded private key are supported as well. In the end, thepaPer has discussed several trust models of CA, the other certificationrevocation mechanism, the aPplication prospect of esPKIX and givessome suggestions for further development in the future.
|
PDF Full Text Request