Application Research And Design On PKI/PMI Components Based On J2EE

With the popularizaiton of the Internet application, the situation of information security have becomed more and more serious, which have made the technology, such as authentication, authorization and safeguarding the information, the focus of current research.PKI(Public Key Infrastructure) offers an effective method for online identity authentication by using the flexible Cryptographic-key and certificates management, and establishes a foundation for the system security. The PMI (Privilege Management Infrastructure) is a new concept brought forward in the process of PKI's development, and has now been separated from PKI. In PMI, Attribute Certificate (AC) is used, which can help us to implement role-based access control. In addition, with its flexibility and short period validity, PMI implements the authorization management better.This paper carefully researched the whole PKI and PMI system. First, cryptography of computer network is introduced. Secondly, the basic principle of PKI and PMI is detailed described, including system structure, relative protocols and standards, the data structure of the certificate, system component and system mode. Based on the research of the basic principle of PKI and PMI, an implentation model for PKI and PMI system is proposed, and a implantation schema using J2EE component technique is presented. The design criterion of PKI and PMI system strictly keeps to the X.509 standards, and it picks the secure technique (i.e., the control of access and the management of right, etc) to ensure its authority, justness and trusty.In addition, current method of ceritfication path construction based on the theory of breadth first is memory and time consuming when facing a complicated CA topological graph. This paper puts forward an new method of ceritfication path construction which is based on A-Star algorithm and discusses the effectivity of it.