Research On Web System Security Based On PKI/PMI

This paper analyzes security requirements of enterprise Web system and designs security model based on PKI/PMI that includes basic infrastructure, access control modules and system interface. Basic infrastructure is the foundation of the model and it includes PKI and PMI that realizes signature and authentication of consumer. Access control modules supplies interface authentic function from PKI and PMI. System interface supplies Web system access for consumer.According to PKI criterion, CA and RA and DTS are designed using B/S infrastructure. PKI realizes signature and its security and performance are analyzed and compared. According to PMI criterion, AA and Attribute certificate are designed that relizes authentication. Web system security scheme is applied in school web OA system. It supports single sign-on mode and realizes authentication and access control strategy. The research of Web system security is developed onwards by this paper.