【作者】 宋艳红；

【导师】 冯刚；

【作者基本信息】 华中师范大学 ， 计算机应用技术， 2002， 硕士

【摘要】 随着Internet网络技术的飞速发展，利用便捷、快速的网络进行信息传播已经成为个人和企事业单位提高工作效率的重要途径。如何在开放的网络上安全地传递信息，保障信息的安全，正成为人们日益关注的焦点。为解决Internet的安全问题，世界各国对其进行了多年的研究，初步形成了一套完整的Internet安全解决方案，即目前被广泛采用的PKI技术(Public Key Infrastructure-公钥基础设施)。基于PKI体系的CA(Certificate Authoware)认证技术被公认为是解决网络安全的最有效办法之一。PKI技术采用证书管理公钥，通过CA认证中心发放的数字证书，对要传输的数字信息进行加密和签名，保证信息传输的机密性、真实性、完整性和不可否认性，从而保证信息的安全。 本文结合中南财经政法大学网上办公系统的具体情况，讨论了一个基于PKI体系的CA认证系统(ZNELCA)的设计和实现，为自动化办公系统提供技术安全支持。 首先，本文对各种常见的加密技术进行了深入探讨，通过对对称加密和公开密钥加密的分析，介绍了公开密钥体系的基本原理，同时重点讨论了RSA公开密钥算法及其安全性。 其次，本文对常用的认证方法进行了介绍，讨论了CA中心的构造以及CA认证系统的体系结构。从认证技术出发，对数字签名、身份认证及公开密钥证明等进行了深入的探讨，为ZNELCA的建立提供了理论上的支持。／迄凶八 硕士学位论文＠AlSTER’S TeSIS 最后，本文重点介绍了ZNELCA的设计与实现。ZN’ELCA认证系统以 WndOWS 2000的证书服务功能作为开发平台。在系统总体结构中，主要讨 论了CA认证系统的体系结构及系统的主要功能模块；在系统具体实现中， 讨论了Ca认证中心的建立的技术以及CA认证中心生成数字证书的方法； 在系统实际应用中，结合ZNELCA的特点，讨论了数字证书在中南财经 政法大学网上自动化办公系统中的具体应用：在系统安全性方面，讨论了 数字证书的密钥安全管理。 本文的重点是基于PKI技术设计与实现ZNELCA认证系统，通过其数 字证书服务，保证网上办公自动化系统的信息安全。更多还原

【Abstract】 With the rapid development of Internet technology, information transmission by using the Internet is becoming the key way to improve the working efficiency in the private companies and enterprises. At the same time, the people keenly focus on how to transmit the information safely. The certificate authoware, which is based on the Public key infrastructure, is thought to be the efficient method to solve the problem of information security. In order to ensure the information security, the users can encryption and signature the transmitting data information by using the Data Certificate, which is issued by the certificate authoware.This article combines the details of Internet system of Zhongnan University of Economics and law, discusses the design and realization of ZNELCA, which is based on public key infrastructure and supplies the safety support technology for the automatic office system.First of all, the article discusses some normal kinds of encryption technology. Through the analysis of encryption, it introduces the basic principles of public key infrastructure and emphasizes on the RSA and its safety.Next, the article introduces the certificate authoware and its authentication, and discusses the digital signature, user identification, and Public key authentication. Therefore, these authentications supply the theoretical support for the establishment of the certificateauthoware of Zhongnan University of economics and law.Finally, the article mainly introduces the design and realization of the certificate authoware of Zhongnan University of economics and law. The system use windows 2000 as the software platform and develops systematically by using the certificate services. The system structure of certificate authoware and the function modules of the system is introduced in the system structure part. Therefore, the article introduces the detailed methods of establishing certificate authoware and the establishment of data certificate. Meanwhile, the article discusses the actual functions of digital certificate in office automatic system on web, and the key management security of the digital cerficate.The emphasis of this article is to design and realize the certificate authoware of ZNELCA which is based on public key infrastructure, thus the issued certificate may ensure the safety of the information -transmission of office automatic system on web of Zhongnan University of economic and law.更多还原