【作者】 潘娟；

【导师】 宋雨；

【作者基本信息】 华北电力大学（河北） ， 计算机应用技术， 2003， 硕士

【摘要】 身份认证是证实一个声称的身份是否真实有效的过程，是网络安全技术的一个重要组成部分。本文详细讨论了基于X.509证书格式的PKI认证技术的原理和实现过程，分析了这种认证技术的安全性，针对当前企业级CA众多，急需进行互操作的情况，提出了一种新的信任模型，对现有的PKI系统进行互联，并给出了一个优化的信任路径构建方案。最后，使用数字证书，运用对称和非对称密码体制等密码技术建立起一套严密的身份认证系统，实现信息传输中的身份认证、机密性、完整性和不可否认性。更多还原

【Abstract】 Authentication is an important part in the network security, which allows each party to a communication to be sure of the identity of the other. This article makes a profound study on the principle and realization of the authentication method of PKI and analyses its security. With the development of the enterprise CAs, the existing trust fields need to be integrated, so how to process the trust path has been the main difficulty of it, this article puts forward a new scheme to process the trust path. Finally, an authentication system is constructed based on digital certificate and cryptography technology, and it can provide a better authentication than the non-cryptographic one which are currently used, and guarantees the Confidentiality, Integrity, Non-Repudiation of the information.Pan Juan(Computer Applied Technology) Directed by prof. Song Yu更多还原