PKI/CA技术综述  

Summarization on PKI/CA Technology

作　　者：江为强[1] 陈波[1] 

机构地区：[1]西南科技大学计算机科学与技术学院,四川绵阳621002

出　　处：《兵工自动化》2003年第6期37-39,共3页Ordnance Industry Automation

基　　金：缩小数字鸿沟-西部行动;国家863基金项目(2003AA1198206)

摘　　要：公开密钥基础设施(PKI)是解决网络安全的技术。典型PKI应用系统包括安全Web、注册机构(RA)、认证机构(CA)、目录(LDAP)和数据库等服务器。RA验证客户证书申请后提交CA。CA检查信息完整和数字签名正确后把证书存放到证书库和目录服务器,并将签发证书序列号通知客户和RA。客户即可使用该号通过目录服务器下载证书。1993年以来,美、加、欧洲、韩、日等国已相继展开PKI研究。我国2001年将PKI列入十五863计划,并着手解决PKI标准化、CA互联互通等关键技术问题。Public key infrastructure (PKI) is one of the important techniques for solving network security problem. The typical PKI application system includes security Web server, registration Authority (RA) server, certificate Authority (CA) server, LDAP server and database server. After validated the requisition from user, RA submits it to CA. Then CA creates certification and puts it into the certification database and LDAP database after the integrity of RAs requisition and the legitimacy of RAs signature is certified. America, Canada, Europe, korea and Japan have made scientific researches on PKI successively since 1993. China have ranked PKI as the 15th 863 Program in 2001 and set about to solve the problem of the PKI standardization and the critical technique of interlink and communication of CAs.

关 键 词：公开密钥基础设施 认证机构 注册机构 LDAP 证书 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]