【作者】 刘海龙；

【导师】 王彩芬；

【作者基本信息】 西北师范大学 ， 计算机技术（专业学位）， 2015， 硕士

【摘要】 随着移动通信技术的进步和移动设备的普及,移动商务逐渐开始占领市场。人们可以使用移动设备来开展各种业务,如购买书籍、股票、数字产品(如视频、音频等)和收发邮件,或进行各种网络资源的访问。当请求访问的资源服务处于不同域中的企业和机构之间时,就需要跨域认证机制实现不同企业,不同机构之间的身份认证。由于移动设备的计算能力有限,因此很有必要研究服务器辅助验证技术,保障移动设备的安全性、不可抵赖性、简单性、有效性和移动性。针对这些问题,本文主要完成了以下工作:1、借助服务器辅助认证体系结构,设计了一种基于RSA的服务器辅助认证算法,为移动设备实现基于服务器的辅助验证提供了解决方案。2、基于提出本文的服务器辅助认证算法,设计了一种基于RSA的跨域认证方案,为移动设备实现跨域资源的访问提供了解决方案。3、构建了基于MVC模式的跨域认证系统框架,实现了CA对数字证书的动态管理。CA管理员登陆后台后可以查看用户提交的证书申请,用户可以在前台向CA发送证书颁发、更新和撤销等请求。更多还原

【Abstract】 With the popularity of mobile devices and the advance of mobile communication, mobile business have dominated the market. People can use mobile devices to carry out various business such as buying books, buying equities, using digital products(videos or audio), delivering e-mails and accessing network resources.When a service is requested between companies and institutions that they are in different domains, it needs to implement the authentication in different enterprises or institutions. Due to the limited compute capacity of mobile devices, it is necessary to research the server-aided verification technology to guarantee the mobile device’s security, non-repudiation, simplicity, efficiency and mobility To solve these problems,we make the following research achievements in this paper:1. We analyze the server-aided verification architecture and design a server-aided verification algorithm based on RSA. This algorithm provides a solution to the mobile device sever-aided verification.2. We propose a sever-aided cross-domain authentication scheme based on RSA.The new scheme can help mobile devices access resources between different domains.3. We build a cross-domain authentication system framework based on MVC pattern and realized the digital certificate’s dynamic management of CA. The CA administrator can respond the certificate query submitted by the user, and the user can send the certificate issuance, renewal and revocation query to CA.更多还原