The Implementation And Optimal Research Of PKI Certificate Service

With the continuing improvement of information globality and the incoming trend of China jointing world, the development step of homeland information technology is being larger, the computer and network application is more popular, and more new terms are gradually known by people such as electronic commercial, electronic government, network bank and network stock, etc. However, with the increase of network information exchange, the security of network data transfers becomes the most important issue, and therefore there exist various security solutions. At present, the Public Key Infrastructure based on the digital certificate application is commonly and widely used.This paper firstly fulfills the function module of Certificate Revocation and Certificate Verification, which is necessary for conventional PKI, based on the analysis of conventional PKI and a constructed CA rudiment only with the certificate issuing functions. Then, as for the development trend of current PKI, an improvement solution for PKI is presented in this paper by integrating the Attribution Certificate and Nested Certificate, which will enrich the certificate function of PKI. All we do in this paper focus on the certificate function of PKI, and the innovation is that the improved PKI system can publish not only common public key certificate, but also wireless certificate, attribution certificate and nested certificate which is for improving system verification performance, this multi-function can meet user's large and wide application needs. At last, an optimal PKI framework is designed based on above, and the evaluation and further work for done are summed up.This paper eventually implements the PKI multi-function service of issuing public certificate, wireless certificate and attribution certificate corresponding various requests, and presents an optimal system model..