Research And Implement Of Advanced Authentication System Based On Digital Certificate Technology

Network security is an important research aspect of the information systems. And the identity authentication technology that can authenticate the identity of the sender and receiver is very important in the security system. It is of vital importance to research on controlling user to visit the information resource. In this thesis, the security technology of various password and authentication is introduced firstly, then the theory of the identity authentication is expatiated and development status and character of currently identity authentications technology are summarized. There are four categories of authentication technologies currently: conventional identity authentication, physiological identity authentication, hardware identity authentication; password identity authentication. Innovative identity authentication technology is proposed based on the currently identity authentication.The authentication system in our research is associated with password and hardware identity authentication technology based on hardware digital certificate, which is advanced identity authentication system. The technology of public key is applied in this system, protocol interfaces of the system which can solve the identity authentication in network effectively are implemented. How to replace the traditional password identity authentication is also proposed in this thesis.The validity and efficiency is tested by classical three-layer structure application. The authentication modal can deny the invalid visit and allow the valid visit effectively, so it is met the requirement of the design. Although the authentication speed which is reasonable is lower than traditional password authentication, the security of it is greater than traditional authentication. Some optimize ways are proposed and the optimize results are checked at last.The certification service platform which is associate with the third party digital certificate center (GDCA) based on this identity authentication modal has applied to electronic government affair successfully, such as national skeleton statistic system, guangdong finance manager system, guangdong social security system.