The Design And Implementation Of Digital Certificate Registration Authority Based On CORBA

Traditionally, the function of RA is performed by CA. This means can cause some severe hidden danger of CA's security. For example it may bring on illegal access to CA. This paper puts forward a RA model named Fair-and-Square Registration Authority (FSRA), which advances the design and implementation for an independent and secure RA. The design criterion of FSRA strictly conforms to the PKI standards. The transmission between FSRA and CA is based on SSL, which ensures the independence and security of CA.The main contributions of the paper are listed as follows;1. FSRA is constructed strictly based on PKI standards: FSCA has rational structure and fine flexibility. It supports the remote and distributed services and contributes to build more perfect management mechanism.2. FSRA provides powerful function for user information management: RA Manager Web Side is responsible for handling and auditing user certificate request and certificate revocation request, and managing user information.3. FSRA provide complete audit mechanism for user information: user request must be audited through three steps: browsing, examining and approving.4. FSRA adopts high strength SSL encryption transmission: FSRA introduces the distributed model named CORBA over SSL, It is well extensible andsecret in transmission.5. FSRA picks the control of connection access and management of right: So FSRA system fully ensured the legality when users access data.6. FSRA brings forward digital water mark log which ensures authoritativeness, originality and accountability of log. Digital water mark log has declare invention patent.7. FSRA offers managers a friendly and facile operating interface. RA Manager Web Side facilitates managers on-line auditing certificate request and revocation. Certificate Service System facilitates manager issuing certificate (x.509 certificate and private certificate), revoking certificate and auditing log.FSRA system with entire intellectual property possesses complete function, considerate security mechanism and well expansibility and controllability. FSRA is an ideal solution of an independent RA in PKI application system...