The Design And Implementation Of An Online Certification Authority Platform

As the complexity of software system functionality, software publishers want to control more than just whether the software itself was illegally copied, as well as software to use parameters, and so forth. On the other hand, with the number of released softwares increasing, software publishers released a software license on the content management becomes more complex.For these problems, this article comprehensivly analyzes commonly used software protection and licensings . And then We propose a new generation software protection techniques base on Internet: Online Certification Authority Platform. Online Certification Authority uses Internet server to replace the traditional use of the encryption hardware or the client's license file. It can reduce the problems which end-users met in the process of using the software, let maintenance be easier, and the damage and loss of encryption hardware and license.The article designs and inlements an onlice certification authority platform and its client development library. Platform bases on Internet certification with B/S(browser/server) + C/S (client/server) architecture, storage and management. Software developer can integrate the library to its sofware easily, and then , publisher can easily license the software users, management and updates.Online certification authority platform consists of three parts: platform management subsystem, certification update subsystem, the client development library. B / S architecture of the platform management subsystem built using struts + ibatis framework. C / S architecture certification update subsystem, part of the certification authority using JSSE (Java Secure Socket Extension) technology underlying the X.509 digital certificate and SSL-based " one time padding " encrypted transmission; Automatic Updates Automatic Updates section defines the configuration and communication protocol are implemented by the module part of the update released software. Corresponding to the client platform development library provides encryption / decryption, access to hardware interfaces fingerprints for software developers the flexibility to call. Overall, from the network transmission to the client software, it achieves comprehensive authentication and encryption.