Based On The Certificate Functions Of Multi-platform Library Designed To Achieve The Basic Pki Framework

The development and popularization of information techenology inaugurate a brand new living space for people and generate the significant impact on each aspect of economy, polity, science and education as well as social development in all aroud the world. On the one hand, the combination of information techenology with governmant management, finance, public service, education, medical treatment, traditional business brings a big new market; On the other hand, although the computerization brings high efficiency and friendly service, It also brings the threat, risk and duty. The information on web is often to be wiretapped, to be tampered or to be destroyed. All kinds of network attack programs are to be diffused. This situation makes people anxiety-ridden. So how to build the trust and security and make the network become a civilized, healthy and well-ordered living space on the basis of security and trust to fully exert the advantage of network and promote the development of the social economy and culture now have become the focus of attention of every country and every information industry.At current, the only infrastructure that crm afford trust and security service is the public key infrastructure (PKI) that will disscussed in this paper. The purpose of infrastructure is to make the different entity can use the services offered by the infrastructure through following the necessary principles. As the security infrastructure is to provide the secure fundamental framework for the whole organization and can be used by any object that need security in the organization . The PKI technology provides various services such as certification , non-repudiation, encryption and decryption and key management for network to ensure the security of network. Now many countries have begun to apply the PKI and many corporations have developed the PKI products. Our country is a big network nation , So it is vital to develop our own PKI technology. To develope our own PKI products through researching this technology is no time to delay.This paper detailedly describe my work in the research of PKI, mainly include to independently develope a certificate function library that suitable for multi-platform and to establish a fundamental PKI framework based on this library. The innovation of this paper is to implement multiform certificate process functions in the certificate function library, support the process of multiform certificate format including X.509v3 certificate using in Internet and WTLS certificate using in wireless, and meanwhile provide multiform APIs that can make this library used in different applications as a functional component. Furthermore, after detailedly analyzing the fundamental PKI framework, using the certificate function library implemented in this paper to construct a simple PKI system to accomplish the functions such as certificate request, certificate management and certificate issue. Finally, aiming at the practical works in this paper I give my own evaluations and advance my own improve ideas. Moreover, deeply discussed all kinds of problems that to implement PKI will be faced with.This paper has established a prototype of the certificate function library and PKI system and can run successfully through test.