我国网上银行安全认证体系架构的理性选择

Rational Choice of Internet Banking Authentication System in China

为了确保网络信息安全,特别是解决开放网络下的网上身份认证问题,安全认证技术在国内银行业得到了广泛应用,但同时存在的一个突出问题是国内多家网银认证机构之间相互分割,缺少互通机制,无法实现跨行认证和跨行交易。本文将围绕网银认证机构互通这一主题,在CA信任模型技术分析的基础上,对我国网上银行安全认证的现状进行具体分析,有针对性地就我国网上银行安全认证体系规划提出了桥接、交叉、建立统一根CA等三种解决方案,并对各方案优劣进行比较分析。

In order to ensure the information security, especially to solve the problem of certificate authentication in open network, PKI/CA technology has been widely used by most internet banks in China in recent years. However, one important problem is that so far Internet - bank - serving CAs in China is separated from each other and there is no efficient connecting mechanism to realize trans - bank authentication and trans - bank transactions. The paper mainly discusses the issue of trans - bank authentication among Internet - bank - serving CAs. Concretely, the paper proposes following solutions: designs - - Bridge certification, Cross certification, building root CA of Internet banking - - on the framework of Internet banking authentication system in China.