基于PKI的网络云认证系统设计  

Design of network cloud authentication system based on PKI

作　　者：张瑞[1] 舒虹[1] 

机构地区：[1]贵阳学院数学与信息科学学院,贵州贵阳550005

出　　处：《现代电子技术》2017年第23期81-84,共4页Modern Electronics Technique

基　　金：贵州省科学技术基金:基于PKI的移动云计算安全研究(黔科合LH字[2014]7215号)

摘　　要：为了提高网络运行的安全性,设计了一种基于PKI的网络云认证系统,介绍了公钥基础设施PKI的框架,详细介绍了数字证书,给出证书制作过程。所设计系统主要由应用模块与云认证模块两大部分组成,通过证书中心模块产生密匙对与数字证书,将其压缩成文件,利用安全信道递交给用户,实现数字证书申请。云认证模块通过"挑战/应答"协议完成核对认证,给出云认证协议的设计过程。实验结果表明所设计系统效率和可靠性均较高。In order to improve the safety of network operation,a network cloud authentication system based on PKI was designed. The framework of the public key infrastructure(PKI)is introduced. The digital certificate is introduced in detail,and its manufacturing operation is given. The system is mainly composed of application module and cloud authentication module. The secret key pairs and digital certificate are generated in the certificate center module,compressed into files,and submitted to user through the secure channel to realize the digital certificate request. The certification is checked in cloud authentication module by means of "challenge/response" protocol to give the design process of the cloud authentication protocol. The experimental results show that the designed system has high efficiency and reliability.

关 键 词：PKI 云认证 系统设计 数字证书 

分 类 号：TN915.08[电子电信—通信与信息系统] TP311[电子电信—信息与通信工程]