To Introduce A Certificate Mechanism To Protect The Security Of Enterprise Information Assets

With broadband Internet is widely used, more and more enterprise depends on Intranet/Internet and application software to do business, at the same time ,electronic-business is used largely. But Internet has open characteristic, one side it brings enterprise more efficient and convenient, on the other hand, it brings hidden danger to enterprise information property.At present, our enterprise has set up complete information system. but these systems is mostly accessed by adopting "user ID+password" , this way is not secure. Another with the increasing unite speed in tobacco occupation, enterprise group become more larger, office is consist of center, branch agent , branch office, factory etc. company is facing a challenge how to realize interconnect among all kinds of branch agency to share resource and communication with each other.By studying successful example of popular electronic commerce, considering these hidden danger, on the basis of deeply researching secure stand and architecture on electronic commerce now, this thesis raise solution on how to construct architecture based on PKI/CA and easy to carry (?)nterprise secure authentication solutions to protect and efficien(?) use enterprise information property. Mainly include list contents:1.This thesis is detail about public-key encryption technology, Message Digest Algorithms, Secure Socket Layer etc. popular standard at present.2. This thesis is detail about secure construction on the basis of PKI/CA architecture, manager of PKI-CA, core products of PKI- digital ID.3. This thesis is detail about how to ensure enterprise information system by deploying "digital ID " architecture.4. This thesis is detail about arranging secure enterprise Web sitebased on CA of enterprise.5. This thesis is detail about arranging secure VPN based on CA of enterprise.Above all , in order to satisfy enterprise demand of securely applying information system, guarding against hidden danger in all kinds of enterprise information system, enterprise can set up a secure architecture based on PKI/CA . on the basis of secure CA framework of enterprise, CA c;n issue "digital ID" for workers , equipments, services of enterprise, let them use "digital ID" to authenticate ID , to realize digital signature, to communication with encryption technology etc. by open Internet.