The Design And Implementation Of Minitype Certification Authority

With the development of the computer network technologe, the computer plays a more and more important role in people's lives and works. Now the e-commerce becomes popular and widespread. The technologies of computer and information have changed the style of human being's lives and promoted the efficiency of the business, however they also exposed some weaknesses to the people who want to commit a crime. It is necessary to apply some security to ensure security service of confidentiality, integrity, authentication and non-repudiation for the Internet application. As an infrastructure of the information security, Public Key Infrastructure is based on the public key encrypting system.Certificate Authority is the key component of PKI. It issues the standard X.509 certificate which bundle users' public key and users' other identification information. As a good solution to key distribution and management issues, CA uses the digital certificates on the transmission of data encryption and signature to ensure the confidentiality, authenticity, integrity and non-repudiation of the data.At present many CA certificate centers have been established, for example, the local CA certificate center, the financial certificate center, and so on. At the same time many enterprises have the ability to build CA authentication system, such as JiLin University Information Technologies Co.Ltd, iTrusChina. The available commerce CA centre has capability completely resolving the problem that the campus network demands digital certificates. But, on the one hand, the college cannot bear the soaring expense, on the other hand, the realiztion to system's additional function is not very flexible, timely and the cost of that is expensive. In addition, mary schools have professionals in using and maintaining PKI system. The establishment of campus CA centre is not only necessary but also feasible.The paper starts from the related theory and technology of PKI, designs and realizes a minitype CA - FoxCA system with better security, commonality and expansibility. The system realizes the majority of the CA functions which include generation root certificate, issued X.509 certificate, repeal certificate, the certificate will be saved to USB Key Medium. This system has characteristics such as simplified structure, easy using and ect.In the end, We analyze security of the FoxCA, summarizing the paper and looking into the further distance of research into the system.