【作者】 宁红宙；

【导师】 巩建平；

【作者基本信息】 太原理工大学 ， 信号与信息处理， 2002， 硕士

【摘要】 本文主要研究的是基于PKI机制的数字证书应用，面向网络信息安全应用领域。通过对信息安全模型进行分层，明确各层的特点和任务，然后在高层次的基础上对数字证书应用进行研究。本文侧重研究了两个具有实际意义的应用方案，时间戳服务系统和安全FORM表单，通过对数字证书的应用来提高网络信息安全度，并简化应用协议。 时间戳服务系统为用户提供时间戳服务，以此来提高网络信息的抗抵赖性，增强网络信息安全。通过在时间戳服务系统中引入数字证书，简化了时间戳形成的协议，简化了系统的设计工作，提高了系统的工作性能，并通过数字证书使系统中的用户身份识别过程简化明了。数字证书与时间戳服体系的结合，使时间戳融入PKI体系，增强PKI体系的健壮性。 安全FORM表单是对现有HTTP协议中的FORM表单系统进行改进，通过增加应用层协议并引入数字证书，使得FORM表单数据从网络传输到网络存储都具备非常可靠的安全性和方便的身份识别功能，非常适用于目前各种基于HTTP协议的网络安全应用。 通过以上两种数字证书应用方案，总结出数字证书应用中的各种技术，推动PKI技术的发展，增进社会网络信息化安全建设。更多还原

【Abstract】 The paper studies the application of digital certificates based on PKI, which is used in the field of network information security. After presented the model of information security and given each layer’s function, the application of digital certificates is studied on the high layer. The paper mainly studies two practical applications: Time Stamp Service System and Security Form. By using digital certificates, network information security is improved, and application protocol is simplified.Time Stamp Service System provides time stamp for user, which is used to improve information security. By combining Time Stamp Service System with digital certificates, the protocol, design and identification of time stamp is simplified, and the capability of the system is improved. Digital certificates make Time Stamp Service System related with PKI, and increasing the function of PKI.Security Form is used to improve the security of form in HTTP. By using digital certificates in form, the data of form have security and identification from data - transfers to data storage. Security Form can be applied to all information security based on HTTP.Through the two applications, techniques of digital certificates application are concluded, which impulses the development of digital certificates application and network information security.更多还原