【作者】 郭向国；

【导师】 巩建平；

【作者基本信息】 太原理工大学 ， 信号与信息处理， 2003， 硕士

【摘要】 PKI公钥基础设施已逐渐得到社会的公认，目前正处于一个不断完善的阶段。它以加密技术为基础，提供了实际实施和运作使用证书的系统所需的组件和服务。数字证书是PKI技术的直接载体。认证中心就是颁发和管理数字证书的机构，在具体的应用中处于大家都信任的第三方地位。它由三部分组成：CA、RA、DA。其中RA系统是认证中心与证书用户的界面，提供对用户的注册和管理服务，同时，它也是与应用系统相结合的接口。 本文以CFCA对RA系统的需求为契机，在CFCA前置机的基础上设计了一套可以广泛推广使用的RA系统。该RA系统安全可靠，性能优越，跨越SOLARIS和WINDOWS两种平台，可以充分满足不同用户的需求。系统具有良好的扩展性，可以根据需要扩大使用规模。系统具有友好的操作界面，使用方便，可以迅速的部署，作为CFCA的用户接口提供数字证书认证服务。 在该RA系统基础上，本文还提出了在证券领域的使用的代理系统，解决了RA系统和券商的数据系统共享的问题，简化了证券用户证书的申请的流程，以更方便地为证券用户提供证书服务。该代理系统具有通用性，稍加改动，就可以用于其它领域。更多还原

【Abstract】 Basing on the encrpytion techniques, PKI (Public Key Infrastructure) provide modules and services for deploying certificate system. The Certificate Authority (CA) is the organization for issuing and managing certificate and is the third part that all believes. The RA (Registration Authority) is the interface of CA to certificate users, and provides service of registering user and managing users.This paper designs a RA system on the FEP of CFCA. It has two versions for Solaris 8 opration system and for Windows NT. RA system use mutiple-thread technology to process the requests from mutiple RA clients. It is of high security by building SPKM linking between RA system and FEP and between RA Server and RA Client. The interface to users is so friendly that this system can be operated simply and can be deployed to a new place easly. Being the Interface of CFCA, the RA system provides digital service with CFCA together.This paper brings forward a kind of proxy system for RA system used in stockjobber. This system can resolve the problem of data sharing between stock system and RA systems, and can simplyfy the flow of stock user applying for digital certificate, provide certificate services that promote the customer’s convenience. This system also can be used in other fieldes with little modification.更多还原