一个安全的企业域上的PKI建设方案

A Security Scheme of Public Key Infrastructure in an Enterprise

ＰＫＩ即“公开密钥体系”，是一种遵循既定标准的密钥管理平台，它能够为所有网络应用提供加密和数字签名等密码服务及所必需的密钥和证书管理体系。为企业域上建立ＰＫＩ提出了具体可行的建设方案，可以为用户生成加密证书和签名证书，并对其安全性进行分析。

With rapid development of Internet, there are more and more countries and companies focus on the security of transaction through public network. PKI(Public Key Infrastructure) become a stardard of key management, it can provide all kinds of encryption and signature service for network application. This paper describes a security scheme of PKI in a enterprise, User can get both encryption certification and signing certification within the system. and finally analysizes security of the scheme.