Ddsign And Implementation Of PKI-Based Sub-Cryptosystem

With the development of information system and networks, especially with the wide applications of internet and electronic commerce, security of some old large-scale networks becomes more and more important, which is based on special and complicated structures. In the paper, the sub-cryptosystem of the project named "Chinese Railway Ticket Network" is developed and applied aiming at solution of these kind problems.Firstly, the development of network security and PKI are introduced, and some standards of PKI are discussed in detail. Secondly, the author analyzes the methods of cryptographic technology and the component of sub-cryptosystem based on the PKI, and focuses on the design of the key management and certificate management of sub-cryptosystem. However, Due to the confidentiality of the project, the design and implementation are not discussed deeply. Thirdly, the realization methods and management policies of the physical security in the sub-cryptosystem are given. Finally, the author presents the application of the sub-cryptosystem and makes some suggestion of enhancements.The successful implement of the project is an exemplification which has great influence on the application of PKI, and is also a significant enhancement of security of information system and solution of security of complicated networks.