The Design And Implementation Of The Online Update System In The Application Of Digital Certificate

The development of internet promoted the popularity of e-commerce. The increasing in trading activities also drew people's attention to the security of transactions. While as a safe and effective network security technology, digital certificate has taken advantage of aspects of authentication, temper-resistant and non-repudiation. It has been applied in more and more various fields. With the expansion of the users'group, the number of cross-regional users became larger and larger, which leads to an updating problem.In the actual application environment of digital certificate, the users always face to regional differences when they update the digital certificate before the termination of the certificate is valid. As a starting point of solving the problem that the digital certificate can not be returned promptly to the issuing authority during the users'updating process, a tool for extending the validity of digital certificates by the network is designed in this paper.By the analysis of actual demand, the digital certificates online update system utilized the software method and takes the advantages of C/S framework as the framework of the system, which realizes the extension of the life cycle of digital certificates through the network. Using the Digital certificate online update system, the user's cross-regional problem and the problem of the covering by certificate authority service areas can be solved, also the efficiency of updating will be improved. Finally, digital certificates online update system in accordance with the design achieved the functions of each part by programming, and for safety considerations, the system used SPKM protocol to protect communication security in update processing.Online update system has the following characteristics:1. Structure is simple, low requirement on the application environment, flexibly deployed.2. Simple interface, users can use it without training3. Running speed, multi-threaded design, you can make full use of system resources.4. It has the error logging function to facilitate the technical staff for error location.5. Strong controllable. The server can control the user's updating.6. Security is strong. For operational risk, the introduction of SPKM protects communication security when the data transfer.The digital certificate online update system has been used in some practical application of digital certificate after the completion of the system. The difficulties which the users met before are solved, the service quality is improved, and it played a positive role in promoting digital certificates and improving the follow-up services of the certificate authority.