Design And Implementation Of PKI-based CA System

For the protection of network data integrity, confidentiality and non-repudiation, to establish a fair, just, and authoritative CA system is the important work of CA Certification Center. With the continuous expansion of the digital certificate business, the original simple CA system has been unable to meet the needs of business applications.CA in some industries are often a simply CA system of production of certificates and the issuing of certificates. Although forms of work can be carried out, but the follow-up problem is gradually emerging. Maneuver, management methods are backward, unable to meet the CA business efficiently and orderly. Therefore, the establishment of convenient and efficient CA system is very necessary.The development process of a CA system is described in this thesis. The system is based on PKI technology, and adopts C/S structure, VC++language is used as development tool, OpenSSL is used to achieve secure communications, SQL SERVER is used as a database platform of this system. The system includes following functions: the function of certificate key managements, the function of certificate/CRL issuing, the function of the certificate registration, certificate management, certificate store and release, the function of query certificate status. The tests show that the system will simplify business processes of digital certificate, so that the operation of the system administrator is more convenient, to analyze the results is more intuitive, clear and user queries the data more efficiently.In this thesis, firstly, the subject background, the development purpose of the system and the structure of the thesis is given. Then the use of the system-related technologies is introduced in the thesis. Next, a detailed analysis of the system is carried out, including system requirements, operating environment and development environment and system architecture.In the part of system design, the overall design is proposed and then concrete design of each module is given in detail. Finally the database design of the system is introduced. In the part of system implementation, first of all, the detailed implementation each module are described, as well as the key technologies used in them. System test is introduced from the view of unit testing, integration testing, system testing, and then the test conclusion is given. At last, the work in this thesis is summarized and the further steps are prospected.