毕业设计（论文）-数字证书的系统化管理设计.docVIP

摘要 Internet的广泛应用促使人们对网络安全的关注越来越深入，因此如何对网络通信中对收到的数据进行验证，保证网络交流的安全可靠性成为人们所关注的焦点。数字签名与认证技术正是基于这样一种背景下应运而生。PKI（Public Key Infrastructure ）PKI较好的解决方案是数字证书。CA是PKI最重要也是最核心物组成部分，通常是用户团体所信任的第三方，如政府机构或金融机构。 使用数字签名保证了数据身份的确定性、不可篡改性和不可否认性。数字证书的主要功能就是保存公钥和某个人或机构的对应关系。X.509证书格式是应用广泛的一种数字证书格式，大多数的网络安全设施或电子交易过程中有广泛的应用。 本设计从数字认证中心的构建出发，通过构建CA认证管理中心通过对数字证书的有效管理来实现对网络可信任身份的保证，确保网络通信的安全。 关键词：网络安全，数字签名，数字认证中心，数字证书 ABSTRACT The extensive application of the Internet urges people to pay more and more attention to the network security, so how to verify the information that received through Internet to insure the security trustiness of the network communication becomes the focus of people’s attention. The technology of digital signature and digital certification occurs. PKI, public key infrastructure, could solve the issue of network security efficiently, which can make the data encrypted and certificated. CA, certification authority, is the most important kernel of PKI, which is usually trusted by a large crowd as the third party, such as the government or finance institution. Digital certificate is a good idea to resolve the security problem and also for PKI. The usage of digital signature guaranteed the certainty, non-sophisticate and non- disavowal of the data. The main function of the digital certificate is to store the corresponding relation between the public key and some person or some institution. X509 is the most extensive format of digital certificate. Many parts of network security infrastructure or electronic business have extensive application. The discourse starts from the setup of CA. I write a software named Center of CA Management, which ensures the authentic figure on the Internet through effective management of digital certificate. Key Words: Network security, Digital signature, CA, Digital certificate 目录 第一章 概述 1 1.1　背景 1 1.2 解决办法 1 1.3　我国数字认证中心(CA)的发展现状及存在的问题 2 第二章 非对称加密原理 4 2.1　对称加密 4 2.2　非对称加密与消息认证 4 2.2.1　非对称加密 4 2.2.2　消息认证 5 第三章 数字签名与公钥证书 8 3.1　数字签名 8 3.2　公钥证书 8 3.