Pki Bridge Ca Model And Prototype System Implementation

As the gradual improvement of the degree of the network and information' application with the whole country, the safe of the information is paid more attention to ,however, there is little research about how to apply PKI to our own national. If apply the existing technology of PKI straight, that is hard to actualize the authority certificate in the whole country. To save the problem, we need to search a new our own way to construct PKI.This thesis is devoted to research the problem which can realize the interconnection of many CA in our whole country, and analyzes synthetically the existing multistage trust model in PKI, combining the national conditions of our country, then based on which this thesis puts forward a kind of new trust model whichis suitable for the national conditions of our country-Multistage Bridge CertificateAuthority , MBCA. Utilizing real case as the background and building a two-level bridge CA, it can be helpful to PKI construction project of our country. The main research work and innovation that this thesis do include:First, commonly used multistage trust models in PKI is analyzed, and summarizes by combining our country's conditions.Second, the new thinking of multistage trust model in PKI is put forward -MBCA, by combining our country's conditions.Third, the CA part is designed and realized. Especially about the design of the certificate of multistage CA bridge, ASN.l language is used to redefine the extensions.Fourth, the LDAP server is designed and realized. And when designing, the multistage form is also used, and referral is used to transmit request between levels.Fifth, utilizing a stature project of the project of "Research of supply the logistics of the chain based on coordination and production plan problem" of National key discipline construction " Management science and project "of Dalian university oftechnology "211 projects "-Development of the authentication system of the safeidentity, design a concrete instance of two-level bridge CA system.Now, conclusion is clear: in theory, the MBCA trust model can actualize the interconnection of many CA in our whole country; in practice, a concrete instance proves its feasibility.This thesis have certain reference value to the theoretical researching of PKI multistage trust model and to our country PKI realitying of project.