Research And Implementation Of Digital Certification Technology

With the development of Internet, E-Commerce has gradually become the new way of doing business affairs. It contains enormous commercial potential and developing opportunities. Moreover, it changed our lives, work and the expectation for our future fleetly. But security problems stand out with the development of E-Commerce. Secure E-Commerce means expanding E-Commerce with secure techniques and measures of encryption and digital signature to resist the anticipative risk.This article researches and discusses the basic knowledge of Certificate Authority CA, Public Key Infrastructure PKI and how to realize the online certificate revoked status query with Online Certificate Status Protocol. It researches and discusses the Certificate Revocation List CRL method, which is also used to query the certificate revoked status and compares the advantages and disadvantages of each other. Based on my developing experience as a member of CA developing team of Information Security Lab, Institute of Computing Technique, Chinese Academy of Sciences, I deeply investigate and describe how to realize the OCSP responder that can help users query certificate revoked information online in both Client and Server. It is expected that it can be some helpful to the development of digital authentication.