Design And Implementation Of Public Key Certificate Management System

The Public Key Infrastructure (PKI) is an integrative solution of network security, which takes on universal characteristic. Recently, extensive researches and applications are carried out. And it is thought to have a bright future. Based on the public key cryptology, PKI chiefly functions in certificate life-cycle management and trust relation management. In addition, it synthesizes many other security methods such as management and strategy. By this way, PKI constructs an all-round platform for various security services.The complexity of network security results in the application of PKI must be a comprehensive and long-term process, which has involved technology, management, business, law, government, and so on. This thesis realized a subminiature PKI with core functions according to PKI's basic principles, which followed the international standard, and referred to some existing products. What's more, the author also did a detailed investigation of various technical issues during the PKI's implementing, including system architecture, function module, software structure, operation management, certificate life-cycle, trust relation management, and the ways to guarantee its operability and extensibility.For all the details discussed above, this paper has managed to offer corresponding methods to deal with specific practical environment. Especially, it puts great emphasis on exploring and discussing the system operation, client module, certificate type and extensions.The investigation of PKI's implementing enriched our knowledge of PKI, which is helpful for its further improvement theoretically and practically. The final purpose of all these efforts is to build a high-efficiency network security platform.