基于PKI技术的电子政务网身份认证系统的设计与实现

发布时间：2018-03-06 08:23

本文选题：PKI技术　切入点：身份认证　出处：《吉林大学》2014年硕士论文　论文类型：学位论文

【摘要】：随着网络的广泛应用，电子商务、电子政务在企业和政府中的应用逐渐增多，网络安全成为一个重要的研究课题。身份认证技术则是保障网络安全通讯的第一道关卡。公开密钥基础设施PKI提供在开放式的网络环境下的身份认证和身份鉴别服务，能够保证传输数据的机密性、真实性和抗否认。目前已成为网络信息安全身份认证领域的主流技术。本文围绕基于PKI技术的电子政务网身份认证系统的设计与实现，对PKI技术、密码加密技术和数字证书等进行了研究和分析。具体的研究和实现工作主要有以下几个方面：（1）介绍了当前应用比较多的几种身份认证技术，尤其重点讨论了基于PKI技术的身份认证技术；分析各种认证技术的优点和缺陷，并进行比较。（2）介绍了PKI体系的相关技术，包括对称密钥加密技术和非对称加密技术的基本原理。分析了它们的优点和缺点。介绍了消息摘要和数字证书的基本原理，应用方法。重点介绍了数字证书的格式和特点。同时介绍了数字签名、杂凑值数字签名、私钥数字签名和数字信封。（3）介绍了PKI体系的基本概念、组成、核心服务。详细介绍了PKI体系中的核心组成部分CA，包括CA的功能、信任模型、组成。重点介绍了证书撤销机制，PKI体系中用户身份认证流程。（4）设计身份认证系统。阐述了系统的设计目标，功能目标，性能目标，，特点和系统的组成。详细介绍了本文身份认证系统的证书签发系统CA，注册审核系统RA，密钥管理系统，LDAP目录服务系统。（5）实现了身份认证中心系统。首先生成和发布CA系统的根证书。然后实现系统功能，如颁发数字证书，撤销、查询和更新数字证书。同时通过单点登录和双向身份认证实现了用户访问电子政务内网的身份认证。（6）应用Avalanche测试工具对身份认证系统在最大并发压力下的运行情况，以及连接处理性能的测试。详细分析了测试数据，得出分析结论。证明身份认证系统基本实现了本文最初的设计目标。
[Abstract]:With the wide application of the network, the application of E-government in enterprise and government is increasing gradually. Network security has become an important research topic. Identity authentication technology is the first gateway to ensure network security and communication. Public key infrastructure (PKI) provides identity authentication and authentication services under open network environment. It can guarantee the confidentiality, authenticity and anti-denial of the transmitted data. At present, it has become the mainstream technology in the field of network information security identity authentication. This paper focuses on the design and implementation of the identity authentication system of E-government network based on PKI technology, and studies and analyzes the PKI technology, cryptographic encryption technology and digital certificate. The specific research and implementation work has the following aspects:. This paper introduces several kinds of identity authentication technologies which are widely used at present, especially discusses the identity authentication technology based on PKI technology, analyzes the advantages and disadvantages of various authentication technologies, and compares them. This paper introduces the related technologies of PKI system, including the basic principles of symmetric key encryption and asymmetric encryption, analyzes their advantages and disadvantages, and introduces the basic principles of message digest and digital certificate. This paper mainly introduces the format and characteristics of digital certificate, and also introduces digital signature, hash value digital signature, private key digital signature and digital envelope. This paper introduces the basic concept, composition and core service of PKI system, introduces the core component of PKI system, including the function of CA, the trust model, and the composition, and emphatically introduces the certificate revocation mechanism and the process of user identity authentication in PKI system. Design identity authentication system. The design goal, function goal, performance target of the system are expounded. This paper introduces the certificate issuing system (CAS), the registration and verification system (RAA), and the key management system (LDAP) directory service system. Firstly, the root certificate of CA system is generated and issued. Then the system functions such as issuing digital certificate, revoking, Through single sign-on and bidirectional authentication, the user can access the intranet of e-government. 6) using Avalanche test tools to test the operation of authentication system under maximum concurrent pressure, and the performance of connection processing. The test data are analyzed in detail. The paper draws the conclusion that the authentication system basically realizes the original design goal of this paper.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】