Design And Implementation Of The Certificate Issuing System For Financial IC Card

With the development of e-government, the electronic exchange of funds on the network has become increasingly frequent, how to prevent the information of forgery and deception has became a very important problem. The industry standard "Chinese financial integrated circuit (IC) card specification" which is issued by the people’s Bank of China, provides a security system of electronic cash data authentication. Through the establishment of certification center, a public key certificate is generated by using a private key, the digital signature in this digital certificate can ensure the authenticity of the certificate information, and ensure the integrity of digital information trasmission.The paper takes the CA authentication center which in the financial IC card debit/credit application of public key authentication system as the object of research, and the bus IC card across different district and the traffic construction as the background, summrizes the application mode of digital certificate in the system through researching on the related theory and technology. The paper is based on the analysis of the targets and functions of the system, makes the system function module in division, then the asymmetric key generation and service, certificate issuance and management, personnel management, security audit and other functions are designed in detail. Finally, the certificate issuing system for financial IC cards is achieved. The system is based on digital signature technology of public key cryptosystems, uses the B/S architecture and developed by the Java language. In this system, Oracle is used as the database of this system, the signature algorithm which used in system is the international algorithm RSA and algorithm SM2, and the support of the encryption algorithm is the characteristics of this system. The focus of the system is to communicate with cipher machines securely by message, and the key generation, encryption and decryption, operation is realized by cipher machine.Finally, the paper has carried on the strict test to system, according to the shortage of test, the shortage discovered during the test has been well solved through timely analysis and design. The test presents that the system well achieved the function requirements, and made the business process of digital certificate issued simplification, it has characteristics in many areas, such as having simple structure and being used friendly. Overall, this system is safety and reliable which can meet the issuers’ certificate issued.