The Research And Design Of Minitype Certification Authority Based On Public Key Infrastructure

The rapid development of the Internet has greatly changed people's life and working style, Meanwhile, it brings many security problems .For Example, security information on the internet can be exposed and modified etc .To address the security problems of the network, a set of integrated project has been researched and developed by many countries, that is Public Key Infrastructure(PKI). PKI is a powerful infrastructure which can provide information security services. It is built on the basis of public key, using digital ID as medium to combine identification information of users with their own public key. Its main purpose is to establish secure and reliable operating environment of internet for the users through administration of private key and certificate. We can verify other user identity by digital signature and encryption technology conveniently. PKI can assure the information transferred by internet of confidentiality, integrity, privacy and non-repudiation. At present, the PKI is widely applied in the fields of E-Commerce, E-government, on-line bank , on-line securities and so on .Firstly, this paper proposed the concept of PKI according to the security requirements on the Internet, summarized the current status of research and development of PKI, and analyzed the necessity and significance .After researching about the cryptography, the paper introduced symmetric key encryption and asymmetric key encryption systematically. Secondly, the paper expatiated on the components,security services,related standards and applications of PKI. Finally,on the basis of related theory and technology of PKI, the paper put forward a program of a minitype certification authority and studied the process of certificate request ,issue and revocation emphatically.