基于PKI的应用系统设计与实现

【作者】 李福芳；

【导师】 黄家林； 黄烟波；

【作者基本信息】 中南大学 ， 计算机应用技术， 2002， 硕士

【摘要】 随着Internet／Intranet的广泛普及，网络应用已经深入到社会政治、经济、文化、生活等各个领域，与此同时，网络信息正面临着巨大的安全威胁。因此，网络信息安全问题已成为牵动千家万户的社会问题，也是各级网络管理机构非常关注的头痛重要课题之一。 本文以中南大学(校园网)网络信息系统安全解决方案为例，讨论了基于PKI技术的一整套的网络信息系统安全设计和实现技术。全文可分为三大块，即： 第一部分，包括第一、第二两章。第一章主要介绍本课题的来源、研究和设计目标：第二章讨论开发模式和开发环境的选择，兼及相关技术简介。 第二部分，是实现部分，也是本文的主体，包括第三、第四两章。第三章首先讨论了网络信息安全解决方案的基石——公钥基础设施(PKI)，然后给出了我们的具体设计和实现；第四章是在第三章的基础上，讨论(校园网用户)安全的身份认证系统(下文中简称“身份认证系统”)和(校园网用户)安全的信息系统(下文中简称“用户信息系统”)两个安全应用系统的设计及实现。 第三部分，包括第五、第六两章。第五章主要讨论系统优化技术及关键技术；第六章是全文总结。 本文所描述的三个子系统全部经过了测试，测试表明，三个系统实现了预期的功能，达到了预期的目的，证明系统设计合理可行。更多还原

【Abstract】 With Internet & Intranet’s widely popularizing, network application has deeply affected almost every part of modern society, such as politics, economics, culture, daily life, etc. Meanwhile, network & information systems are being confronted with serious security problems. So, network & information systems’ security has been deeply concerned by nearly everyone of our current society. It is also one of the most troubling things concerned by supervisors of network management branches of each level.This current dissertation analyses a whole solution for network & information systems based on PKI technology, by using the security solutoion of campus network and information systems of Central South University (CSU) as an example. The article is composed of 3 units, they are:Unit 1: This unit includes chapter 1 and chapter 2. Chapter 1 mainly introduces the source and purpose of the project being designed and complemented. Chapter 2 discusses the selection of mode & environment for system development, while concurrently comparing relevant technologies.Unit 2: This unit consists of chapter 3 and chapter 4, which give out the actual design and implementation of the systems. This unit is also the main part of the article. Chapter 3 tries to expound the theory and technology for design and implementation of PKI ?the foundation of network &information security. Chapter 4 presents the design and implementations of two practical and useful application systems ?Secure MIS and Secure Identity Authority System for Campus Network Users of CSU. This two application systems have strong security, for they both are based on PKI technology.Unit 3: This unit is composed of chapter 5 and chapter 6. Chapter 5 discusses the performance optimization mechanism and key technologies used in the systems. Chapter 6 summarizes the main works written in this dissertation.By using the newest and most reliable technologies, the three subsystems given out in this paper are designed and implemented properly and rationally. Experiments and practical use indicate that the subsystems can accomplish the whole tasks predetermined for them.更多还原