基于PKI技术的网上证券信息系统的安全解决方案

The Security Solution of on-line Securities Information System Based on PKI

随着互联网的发展,网上证券交易作为一种全新的交易模式,大幅度地降低了交易成本,提高了交易的透明度,打破了空间的限制,使投资者摆脱了固定场所的束缚。该文介绍了基于PKI技术的网上证券交易系统的设计与实现。系统体系结构包含四个重要实体:证书认证模块、身份认证模块、客户端模块和业务系统模块。该方案对用户的身份验证采用了数字证书管理,对关键数据进行数字签名,数据传输采用了安全连接,实现了数据真实性、完整性、不可否认性。

With the development of internet, the online security trading has become a new trading pattern. It can significantly reduce transaction costs, improve transparency in the trading of the securities, and break the restrictions of space to enable investors to cast off the shackles of fixed place of business. This paper introduced the design and realization of the online securities information system based on PKI technology. The system architecture includes four key entities: certificate authentication module, identity authentication module, client authentication module and business authentication module. In the solution, the validation of user identity adopts the figure certificate, and the key data is figure validated. The data transmission adopts the secure socket layer. The authenticity, integrality and the undeniable is realized.