Access Control Technology On Secure WEB Based On SSL Protocol And X.509

It is discussed that the security hidden troubles exist in nowadays WEB applications, according to these, the problem on how to access control on WEB effectively is introduced. It is discussed the composing of PKI system and the various current standards at the first, then it is summarized all kinds of security transporting and accesscontrol technologies, especially SSL protocol. Based on these, this paper presents an integrated security access control system, each module performance is explained, how to apply PKI and SSL in this system is analyzed, and studies on digital certification granting, using and management is made in details. The main contents are:1. It is analyzed that security problems exists in current WEB Applications;2. With the requirements in electrons government affairs, the comparisons of encryption methods are made. And it resents a secure scheme using SSL;3. The parts on how to realize the certifications issuing, keys managing, certification refresh and written off are designed;4. A set of access control system is proposed to achieve the requirements of both electrons government affairs and securities and integrity;These performances are realized in C++ and the system has put into use.