Secure Protocol Design And Implementation Of UpswingPMI Model

With the development of network, the single authentication can not meet with the security requirements of more occurrences of network applications. A new access control system model UpswingPMI (Improved PMI) is proposed and implemented, which can provide privilege management on the basis of identity authentication. The analytic result indicates that the system can overcome flaws in former PMI, i.e. enlarges the scope in point of PMI from real-time to both of real-time and non real-time process. The main contents are as follows:1. The information secure condition and the development of PMI in and abroad are described;2. The development and theory-technology basis of PMI are analyzed;3. The flow design of each module in UpswingPMI system is proposed, especially the new secure protocol in access control sub-system, which is analyzed in security with BAN logic and in efficiency;4. NTRU arithmetic needed by the protocol is described, of which the method and process are given to implement the protocol. Meanwhile the policy management module is described with XML, and the core PMI and correlation function of access control sub-system, such as reading certificates,policy, authentication and authorization are implemented by Java 2 and some groupwares, such as JAAS.