Electronic Certification System Design And Implementation Of Domestic Algorithm

Increasingly high level of development of information technology, network security issues become increasingly prominent, public key infrastructure PKI as an effective solution to the rapid development of network authentication and encryption technology to get. Public Key Infrastructure (PKI) to provide a variety of online security services for a variety of different security needs of users, mainly identification and identification (authentication), data confidentiality, data integrity, non-repudiation and time stamp services. With the gradual advance of information technology and passwords and security technology development itself, on the PKI system and to provide security-based digital certificates also have new requirements. According to new requirements and standards, need to study the realization of electronic authentication system based on domestic algorithm.In this paper, based on the development of the national authorities issued the "public key cryptography algorithm to do the upgrade work," and promulgated the "electronic authentication system passwords and related safety specifications," "electronic authentication system cryptographic protocol specification" and other standards, design and developed a set of algorithms to support domestic public key infrastructure systems, the realization of the digital certificate life cycle management of the entire process. This design includes algorithm selection system, certificate format, software frameworks, modules and logical structure, making the system to meet existing standards and norms in overall functionality, performance and safety, and adds support for domestic database.This paper developed algorithms based on domestic electronic authentication system, through flexible software framework to achieve a localization algorithm for flexible customization support and certificate templates, using a standard certificate format and flexible operating system support, and the realization of domestic database support. Overall system security in accordance with the new standards for the design and implementation of the overall safety and performance has been improved, making the system has been greatly improved scalability, compatibility. This design of electronic authentication system, meet national norms and market conduct business needs, in the third-party certification and large enterprises and institutions have broad market prospects.