Network And Information Security Research And Design Of The Certificate Management System

Nowadays, more and more new electronic businesses (such as SMIME, SECURE WEB/BROWSER and Network Bank) develop in great extension. They all need some security mechanism to provide privacy and reliability between communicators, so that we can prevent communication from eavesdropping, tampering or messages forgery.In all these applications, three security aspects are concerned: identity authentication, connection privacy and data validity. Cryptography, especially public-key technology, provides a vanetv of critical capabilities for data encryption, digital signature, integrality and identity authentication. So it is a good way to solve security problems using Cryptography technology.In order to authenticate the identity of network users, digital certificate is used. So here comes the conceptæ¡Ÿertificate Authority (CA). It is an integrated system that accepts certificate requests, generates certificates, revokes certificates and manages certificates.CA technology has developed for several years overseas, but it is only underway in China. So it is urgent to research and construct our o~vn CA. CA is very important to the Internet ecommerce development.This paper introduces the concept of CA, its importance and functions, general framework of CA and concrete realization of CA.Here, we introduce three network security models based on security socket layer (SSL), propose their algorithms and realization of extending SSL. In large open systems, there may be more than one certificate authorities. So we classify certificate authorities into several grades, which makes authenticating certificates easily and efficiently. In this paper, the author presents a new authentication ideaæ¢'ross authentication and its algorithm.