Design Of PKI/CA Scheme In A Municipal E-Government Intranet

The purpose of e-government intranet is to reconstruct the managing process of the government, to set up and optimize the management system, supporting system of the decision-making, and the OA system thereof, and to provide strong technological and counseling sustainment for improving the management and servicing level of the government. The construction of e-government intranet in our country is at its infancy. Especially the application and security maintenance thereof is relatively weak, and has directly restricted the development of the e-government.This thesis aims to seek after a safe application method of e-government intranet which suits the situation of China, to clear away the obstacles in the development, such issues as identity authentication, confidentiality and integrity of data transmission, non-repudiation, etc. The program takes the e-government intranet of some city as the model. Some of the contents have been carried out on the intranet, and have got some results to a certain extent. In consideration of the secrecy, the related contents have been eliminated. As one of the primary leaders of the project, I am directly involved in the work of design and implementation etc. and have brought forward the model of simple PKI/CA as well as a resolution of data code protection of the e-government secrets.The thesis firstly analyzes the status quo of the security and risks of e-government intranet, brings forward the security requirements, and sets out the resolution which mainly depends on PKI/CA technology. Because of the complication of the application of e-government, there are still some incompleteness and imperfection in the application of PKI/CA which need promotion and improvement in the future work.