【作者】 张成榆；

【导师】 曹晓东；

【作者基本信息】 大连海事大学 ， 计算机应用技术， 2000， 硕士

【摘要】 网络信息安全是关系到国家利益、集体利益和用户切身利益的大事，是只能依靠我国自身力量发展的技术。其中，用户访问身份鉴证技术能够确认参与加密对话的实体的身份，防止黑客伪造身份、恶意窃听和篡改，在网络通信安全和资源访问安全方面起到重要的保护作用。 本文首先讨论了计算机网络安全标准，重点分析了OSI安全体系结构标准。其次介绍了X.500目录服务与轻量级目录存取协议，特别分析了X.500和LDAP之间的关系。然后介绍了与鉴证系统有关的RFC安全鉴证协议和CCITTX.509安全性鉴证框架协议等国际标准，重点分析了X.509证书格式、获得证书的方法、X.509强鉴证过程以及密钥和证书的管理等标准的关键部分。在这些资料的基础上设计并实现了基于X.509鉴证框架的集中式鉴证机关和应用此鉴证机关的客户端应用程序。鉴证机关管理系统具有用户身份鉴别、证件签发存取、数字签名等功能，客户端应用程序具有访问鉴证机关和带鉴证的安全通信等功能。更多还原

【Abstract】 The security of network information is closely related to the immediate Interests of our country, society and subscribers, which only can be developed by technology power of our own. Among these, Client Access Authentication Technology ensures encrypting communications participator’s identification against hacker’s fabricating status, malicious bugging and distorting, and plays an important role in protecting the security of networking communication and recourses accessing.First, the paper talked about the standard of security computer networking, mainly analyzing the structural standard for OSI Security system. Second, it issued about the introduction of X.500 Directory Service and lightweight Directory Access Protocol, especially dealing with the relationship between X.500 and LDAP. hi the third part, it introduced the international standard of RFC Security Authentication Protocol and CCITT X.509 Secure Authentication Framework Protocol, both with regard to the authentication system, and still emphasizing the key parts of Certification’s Format, how to get the Certification, the X.509’s authenticating process, encryption key and management of certification. Based above-mentioned references and according to X.509, Centralized Authentication unit was designed and realized. What’s more, the Client’s Application Program appeared by using this unit. So Authentication Unit management system provided such functions as Client’s Identification Authentication, Certification signing and submitting, and digital signature. Then, Client’s application program realized the access to authentication unit and security communications with verification.更多还原