【作者】 鲜婷；

【导师】 李涛；

【作者基本信息】 四川大学 ， 计算机软件与理论， 2003， 硕士

【摘要】 传统的RA的职能由CA来完成，这样存在着严重的安全隐患，如可能导致CA被非法访问，进而影响CA的安全性。本文提出了一种独立的，安全的RA解决方案——FSRA(Fair-and-Square RA.)。FSRA的设计与实现完全遵循PKI标准。FSRA与CA的连接采用SSL加密传输机制，保证了CA的独立性和安全性。 具体来说，本文的主要贡献有： FSRA系统构建严格遵循PKI规范：系统结构合理，具有强的灵活性，支持远程、分布服务。有利于建立更加完善的系统管理机制。 FSRA提供强大的用户信息管理功能：RA管理系统网站负责处理和审核用户证书申请、证书撤消请求，管理用户信息。 FSRA提供完善的用户申请审核机制：用户申请必须通过浏览、审批和核准三步资格审核。 FSRA系统问通讯采用SSL高强度加密传输：系统采用Corba over SSL分布式模型，系统闻传输数据加密强度达到军用绝密级。 FSRA系统采用严格的访问控制和权限管理机制：充分保证了用户数据访问的合法性和有效性。 FSRA系统采用数字水印日志(已申报发明专利)：确保日志记录的完整性、原始性和不可抵赖性。 FSRA系统提供友好、方便的用户界面：基于浏览器的RA管理系统网站方便管理员在线完成对证书申请和撤消的审批工作。Windows平台下的证书服务系统，方便了管理员发放证书(X.509证书和私钥证书)、撤消证书及日志审计工作。 具有完全知识产权的FSRA系统具有齐全的功能、全方位的安全机制、良好的扩展性和操作性，是PKI应用系统中一个独立的RA的理想解决方案。更多还原

【Abstract】 Traditionally, the function of RA is performed by CA. This means can cause some severe hidden danger of CA’s security. For example it may bring on illegal access to CA. This paper puts forward a RA model named Fair-and-Square Registration Authority (FSRA), which advances the design and implementation for an independent and secure RA. The design criterion of FSRA strictly conforms to the PKI standards. The transmission between FSRA and CA is based on SSL, which ensures the independence and security of CA.The main contributions of the paper are listed as follows;1. FSRA is constructed strictly based on PKI standards: FSCA has rational structure and fine flexibility. It supports the remote and distributed services and contributes to build more perfect management mechanism.2. FSRA provides powerful function for user information management: RA Manager Web Side is responsible for handling and auditing user certificate request and certificate revocation request, and managing user information.3. FSRA provide complete audit mechanism for user information: user request must be audited through three steps: browsing, examining and approving.4. FSRA adopts high strength SSL encryption transmission: FSRA introduces the distributed model named CORBA over SSL, It is well extensible andsecret in transmission.5. FSRA picks the control of connection access and management of right: So FSRA system fully ensured the legality when users access data.6. FSRA brings forward digital water mark log which ensures authoritativeness, originality and accountability of log. Digital water mark log has declare invention patent.7. FSRA offers managers a friendly and facile operating interface. RA Manager Web Side facilitates managers on-line auditing certificate request and revocation. Certificate Service System facilitates manager issuing certificate (x.509 certificate and private certificate), revoking certificate and auditing log.FSRA system with entire intellectual property possesses complete function, considerate security mechanism and well expansibility and controllability. FSRA is an ideal solution of an independent RA in PKI application system更多还原