PKI Research And Application In Campus Network Security

With the rapid development of campus-network,a variety of applications base on campus-network are increasing numbers.Security of network and information has become a core subject of the campus-network construction.As infrastructure of security, PKI technology can offer a series of security services. So the effective way of solving this problem is to adopt the technology of PKI.However,there are many obstacles in practice of universities's PKI, including higher cost, relatively more complicated technology.The paper describes the theoretical basis of PKI,including asymmetric encryption technology and message digest and digital signature technology,then architecture of PKI and several trust model of PKI are discussed. Because of hacker and virus, Security requirements are analyzed through users and services and applications of campus-network by some examples.The paper propose a low-cost and easy to realize model of PKI system contained with CA (certification authority) and certificate library and terminal entity. It is reflected in three fields:1. Using single-level CA architecture, the PKI model saves cost of operation and management and maintenance of sub-CA servers than the multi-level CA model.2. As an optional management entity, the function of the RA (Registration Authority) is realized by CA,so the cost of operation and management and maintenance of RA servers is saved.3. The PKI model is achieved including CA(RA) and certificate library servers through certificate services functionality in Windows Server 2003, So the cost of development of PKI system is saved.Finally, it is shown that the PKI model is efficacious by a detailed application example of graduate design management system.The PKI model has high reference value for the construction of small and medium campus network.