Research On The Application Of PKI To The Internet

To ensure the security of electronic transactions,(that is,transmission of transaction data confidentiality,reliability and transaction non-repudiation),to prevent fraud in the course of transactions,we must make an environment and mechanisms of trust on the Internet.So,it has become the first problem to be resolved in the development of e-commerce that using the most effective security techniques to set up a security e-commerce architecture.The digital certificate solution which based on Public Key Infrastructure(PKI)and Certification Authority(CA)technology is widely used DOW.This thesis introduces the basic of the encryption algorithm and security frame work,analyses the architecture and functions of a PKI system.Based on these analyses, this thesis canvasses the importance of application PKI to Internet,and describes a simple Intemet PKI proposal(PGP)in common use.Emphasizes to analyses it architecture and issues,and then describes the resolve method and implementation of the system.Secondly,the thesis analyses the potential problems of security in general C/S pattern,puts forward to adopt the method of transferring and memorizing the user's password in cryptograph for the confidentiality.With the basic of CA authentication, digital signature,public-key cryptography and secret-key cryptography,this thesis brings forward a basic model of user registration and C/S,B/S resource accessing under the mechanism that using cryptography to transfer and memory the user's password.At last,using java language,the thesis implements client's digital signature, encryption,server's decryption and integrality validation.