A Security Email Solution And System Realization

Email is one of the most important services on Internet. With the rapid development of network, using email has become a main method of people's communication. However, as a result of network openness, the email that transmitted on it can come under various attacks. Therefore how to prevent the email from all kinds of attacks is an important task. Several secure email solutions have been proposed and used in specific fields.Firstly, this paper introduces some email basic theory, including its composition, working pattern, transmission principle, protocols and so on. It analyses the attacks, which the email systems faced. And it studies some existing secure email protocols, especially PGP and S/MIME. Through these researches, we discover that all of them only secure email body, but not email header. But email header especially email subject transmits on Internet in plaintext, which exists certain security hidden dangers.Next, this paper studies the PKI technology, SSL protocol and smart card technology, and then put forward a security email solution, which solves some problems as follows:(1) Protect email subject secret(2) Realize email header safe transmission(3) Security keys managementThen, this paper uses existing products (Wallgreat KMC) to build a PKI platform, and realize a model for this solution, which includes a secure email server and an email client. For the model, email subject is encrypted with the receiver's public key; email header is transmitted safely, and email body enhance security, through SSL SMTP, SSL POP3. Users'private key can be saved in USB Key, help users carry and use.In order to prove the feasibility of this solution, this paper puts forward some results of function and performance tests, and the appraisal of security. These results indicate that this security email solution, not only strengthened the mail security, but also the losed performance is acceptable.The last part is the conclusion, which includes the work summary, the significances, the application domains, some deficiencies of the solution and next research directions.