基于PKI的小型数字认证系统的设计与实现-计算机系统结构专业论文.docxVIP

摘要 摘要 摘 要 随着信息技术的飞速发展，网络安全理论得到了广泛的应用。身份认证是网 络安全的第一道屏障。实现身份认证的方法很多，但传统的、单一的认证手段暴 露出了严重的安全隐患，已经不能适应信息技术高速发展的要求，因此迫切需要 一种更为安全高效的认证方式。 PKI 以公钥密码学为基础，能保证信息的机密性、完整性与不可否认性。CA 是 PKI 的核心组成部分，它把用户的公钥及其他标识信息捆绑在一起，为用户签 发和管理数字证书。PKI 作为当前网络安全认证领域中的最佳技术，已经被广泛应 用于电子商务活动中。 本文运用 PKI 技术，设计并实现了一个小型的数字认证系统。首先，本文介 绍了密码学基础理论与身份认证方式，并详细阐述了 PKI 的相关技术；其次，通 过分析具体功能需求，设计了一个简单的小型数字认证系统；最后，实现了该小 型数字认证系统。该系统实现了证书生成、证书撤销、证书更新、密钥管理等功 能。此外，针对信息传输过程中存在的信息窃听问题，我们借助网络安全协议 SSL 实现了数据的加密传输，建立了数据传输的安全通道，实现了基于数字证书的身 份认证。 关键词：身份认证 公钥基础设施 数字证书 认证中心 SSL Abst Abstract Abstract With the rapid development of information technology, network security theory has been widely used. Authentication is the first barrier of the information system security field. There are many ways to achieve authentication. However, the traditional, single certification means have exposed a serious security risk and can not meet the requirements of the rapid development of information technology. Therefore, there is an urgent need for a more secure and efficient authentication. PKI is based on public key cryptography. It can ensure the confidentiality, integrity and non-repudiation. CA is the core component of PKI. It bundles users’ public key and users’ identification information to issue and manage users’ Digital Certificate. PKI has already become the best technology in the field of network security certification, which has been widely spread in e-commerce activities. In this paper, a small digital authentication system is designed and implemented by PKI technology. Fist, basic theory of cryptography and authentication methods are introduced, and the related technologies of PKI are elaborated. Second, by analyzing the system’s function, a simple small digital authentication system is designed. Finally, we achieve this system. This system realizes the major functions which include certificate generation, certificate revocation, certificate update, key management and so on. In additional, for information transmission problems that exist