Research And Design Of The Authentication System Of Shihezi University Campus Network Based On PKI

At present, authentication on campus network is mostly based on user/password way, which is not only easy to be stolen but also unsuitable to be managed. Besides, the way is unable to insure the integrity,confidentiality of message transferred by Internet, Thus Building new campus network authentication mechanism has important significance to the safety of campus network.CA is the core and important part of PKI. As the trusted third party,CA is charged with entity authentication. CA affirms the entity authentication,then binds the entity's public key and its identity together by signing in the entity's certificate, in order to guarantee confidentiality,integrity, and authentication for the Internet application. Thereby, The paper studies the authentication principle and implements several aspects include as follows:Firstly, the paper studies the modern cryptology thoroughly. On the base of cryptology, the paper discusses relevant technology of PKI.Make research on PKI entity model, and analyze the encrypto algorithm, the digital signature, PKI operation principle and CA authentication mechanism. The paper has designed a certificate authority model of single CA and multiple RA according to the university framework of organization and the campus network characteristics.further research on certification / CRL format and coding.By means of the Openssl crypto libarary, the paper implements The Shihezi University Campus Network CA that includes certificate application, certificate auditing, certificate issueing and certificate revocation.Realize the authentication system of campus network based on certification center.Makes system testing, and gives application samples of digital certification.