Based Pki Authentication System

With development and wide application of network, network security has been an important field of information system, while identity authentication technique is an effective process used to verify the declared identity.The identity authentication mechanism based on PKI digital certificate ensures the confidentiality, authenticity, integrity of the network transmission data, and provides the authentication and identification service in open network environment.In a word, the identity authentication mechanism has been the popular solution in the field of network security.This thesis researches the procedure for identity authentication of PKI architecture, designs and implements an enhanced identity authentication system which uses PKI technology based on certificate verification, signature, and role-resource access control theory. The main work is as follows:1) Researchs on present several popular identity authentication system, and analyses its advantage and disadvantage2) Describes the theories related to PKI, including symmetric crypto algorithms, asymmetric crypto algorithms and its efficiency and applicability, and discusses the X509 digital certificate in detail3) Emphatically introduces PKI authentication technology based on digital certificate, including its standard and architecture, especially thecore composition of PKI Certificate Authority4) Finally, designs and implements an identity authentication system based on PKI. The system uses a dual-factor authentication theory; Kerberos token protocol, temporary session key strategy to ensure the effectiveness of authentication, integrity, and provides fine-grained access control using Single Sign On method and Role-Based Access Control technology, disuses the solution against potential security threats from the network.