基于PKI/CA技术的铁路身份认证体系  

Planning and constructing of PKI/CA certification system of railway industry

作　　者：姚洪磊[1] 张彦[1] 周泽岩[1] 

机构地区：[1]中国铁道科学研究院电子计算技术研究所,北京100081

出　　处：《中南大学学报（自然科学版）》2013年第S1期356-361,共6页Journal of Central South University:Science and Technology

基　　金：中国铁道科学研究院基金项目(1052DZ1301)

摘　　要：通过对铁路行业已有的CA认证平台的分析,指出其中认证技术和建设模式存在的问题和不足,结合铁路信息系统的实际情况和行业自身的特点,构建了由铁路行业根CA、CA认证中心和RA管理中心组成的铁路行业统一认证体系,提出铁路行业CA中心的建设应采用完全自建的模式,并采用铁道部和铁路局两级分别构建的结构的方式,对认证中心的建设方案、功能和组成进行了分析。On the basis of existing CA authentication platforms,authentication technologies and authentication modes problems were pointed according to the practical situation and technical characters.A uniform security authentication system was proposed which was composed of root CA,CA authentication center and RA management center.It is pointed put that the design of PKI/CA certification center should be built in the form of self-built mode.Two-stage structures including Ministry of Railways and Railways Bureau was used.Building scheme,functions and composition were analyzed as well.

关 键 词：PKI/CA认证技术 铁路认证体系 CA认证中心 RA管理中心 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]