数字证书安全性研究  

Research on Security of Digital Certificate

作　　者：陈怡丹 李馥娟[1] Chen Yidan;Li Fujuan(Department of Computer Information and Cyber Security,Jiangsu Police Institute,Nanjing 210031)

机构地区：[1]江苏警官学院计算机信息与网络安全系,南京210031

出　　处：《信息安全研究》2021年第9期836-843,共8页Journal of Information Security Research

基　　金：江苏省高等学校大学生实践创新创业训练计划项目(202010329008Z)。

摘　　要：公钥基础设施(public key infrastructure,PKI)是基于公钥密码加密技术和数字证书来提供系统安全服务并验证用户身份合法性的一种体系.在系统介绍PKI体系结构及相关技术实现原理和功能特点的基础上,从网络攻击与防御角度,重点分析RSA算法、USBKey数字证书和证书颁发机制(certificate authority,CA)存在的安全问题,提出相应的解决方法和思路.同时,着重从技术和管理2个层面分析数字证书从申领到应用全过程中存在的安全风险,并有针对性地给出具体的应对策略.PKI(public key infrastructure)is a kind of system based on Public Key cryptography and digital certificates to provide system security services and verify user identity legitimacy.Based on the systematic introduction of PKI architecture and related technology implementation principle and functional characteristics,this paper focuses on the existing security problems about the analysis of RSA algorithm,USBKEY digital Certificate and CA(certificate authority)from the perspective of network attack and defense.Then it puts forward the corresponding solutions and ideas.At the same time,the paper focuses on the analysis of the possible security risks in the whole process from apply to the CA to the application of digital certificate based on the technology and management,and finally it gives out specific countermeasures.

关 键 词：数字证书 公钥密钥加密 公钥基础设施 RSA算法 优盾 

分 类 号：TP393.3[自动化与计算机技术—计算机应用技术]