数字证书授权机制的研究与实现

Study and Implementation of a Digital Certificate Authority Mechanism

1 引言进入21世纪,网络安全问题已不再停留在认识阶段,而是进入了实施阶段。随着网络安全投资的不断增加,网络安全技术应用越来越广泛,从电子商务、事务处理到软件发布、电子邮件,任何安全系统都离不开认证,数字签名是目前应用最广的认证系统。数字证书提供了一种在Internet上进行身份认证和数字签名的方式,在网上进行事物处理、电子商务等活动时,双方需要使用数字证书来表明自己的身份,并使用数字证书来进行有关操作。

We studied and implemented a Certificate Authority (CA)server software to issue the Digital Certificate which uses for secure authentication over Internet in this paper,includes:generating the RSA key pair and management of the Digital certificate,e. g. generating a certificate request ,generating a certificate, signing/verifying a certificate and revoking a certificate. Now the CA server that we implemented has passed the test. The conclusion is that the CA server measures up the correlative international standard and it can offer the practical applications.