Research And Design On E-government Security Platform

How to ensure the information security is the focus problem in E-government. According to the current security situation of e-government, the system of e-government needs to solve the problems such as identity verification, authorized access control as well as to ensure the confidentiality, integrity, authenticity, and anti-repudiation, etc. The technology of PKI/PMI can solve the above security problems well.Based on the research of the basic principle Of PKI and PMI, a security platform for e-government system is proposed. This article describes the function, structure and the components of the platform. Cryptography primitive layer offers the basic cryptography calculation and secret key storage management through the cryptography equipment. Based on the Cryptography primitive layer, cryptography service layer offers the advanced cryptography service. CA is the kernel components of PKI implemented system. It will offer digital certificates to assure the validity of the user who is trying to access the e-government system. AA is the kernel components of PMI implemented system. It offers attribute certificates(AC) which is used to identified the users of e-government system. AA issue a policy certificate(PC) to administrate all the identity and their corresponding privilege to provide the projection function from users' identities to privileges. It centralizes the management of authorization. PKI/PMI middlewares mainly offer five functions based on the PKI,PMI system, i.e. identity verification and access control, information encryption, information signature, information signature, transaction signature. The credible time stamp service offers the guarantee the publishing time of e-document. The application layer is mainly for the detailed application of e-government system as well as the application of some security components.Some modules of the security e-government platform designed in this article can be assembled flexibly according to the different applications' requirment, to satisfy their different security needs. With PKI and PMI middleware technology, which is easily to deploy, easily integrated, the developers of e-government system can develop a security e-government system rapidly, without understanding much professional cryptography knowledge.