A Design Scheme of Enterprise Secure Communication Platform

王秀琴,华蓓

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.02.043

2001-01-01

Abstract:By the theory of public key infrastructure PKI and theauthentication structure of electronic transaction system, this paper puts forward a design scheme of enterprise security communication platform based on certificate authority (CA), gives a model and analyses the system's security in detail.

What problem does this paper attempt to address?

Design and Implementation of Self-certification of Digital Certificate Within the Enterprise

刘基,康慕宁,邓正宏

DOI: https://doi.org/10.3969/j.issn.1002-2279.2009.03.011

2009-01-01

Microprocessors

Abstract:Based on the discussing of the Digital Certificate and Certification Authority on the Internet,with the purpose of improving the usability within the enterprise and reducing the enterprise's expenditure on using Digital Certificate,deeply analyzes the structural design of the digital certificate's self-certification within the enterprise.This design has been successfully implemented in the Windows system by combining OpenSSL software package,and using Socket.The structure of the design blends the application system of the enterprise into aunity.The design itself is simple and convenient,has bright prospects in theories and applications.
Inter-domain authentication scheme for Pervasive Computing Environments

YAO Lin,FAN Qingna,KONG Xiangwei

DOI: https://doi.org/10.3778/j.issn.1002-8331.2011.06.023

2011-01-01

Abstract:As a result of the high mobility of the pervasive computing,the principles communicating with each other usually locate at different domains.To secure the service access and communications,the principles should authenticate each other and establish a fresh session key.A novel inter-domain authentication and key establishment protocol is proposed.The proposed protocol reduces the burden of certificates management by adopting the biometric encryption.After inter-domain mutual authentication,the two principles build a new session key using the signcryption technique.The protocol can defend lots of attacks and its correctness is proven by the SVO logic.
Secure Information Exchange Model Between PDM Systems

刘端阳,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2004.01.006

2004-01-01

Abstract:With the development of collaboration among enterprises, it is very desirable to securely exchange information between PDMs through Internet. The original user/password mechanism is very weak, unsecure and inflexible. And also,authorization based on PKC(public key certificate) cannot satisfy the temporary relations between enterprises. In order to satisfy the demand of secure information exchanges between enterprises, according with the genernal security management model of PDM system, This paper designed an AC(attribute certificate) model based on PKC. The model was based on TTP architecture to achieve trust between enterprises and automation of enterprises' collaboration, and reduced the startup cost. And it provides not only reliable authentication and data protection, but also flexible access control and secure audit, and effectively implements information exchanges between enterprises. The new model can be well used in the fields of automobile manufacture,electronics,mechanics and so on.
Study and Design of Network Information Secure Model Based on PKI Technology

DENG Zhi-hong,YAN Jun-biao,CAI Yue-hua,CAI Hai-bin

DOI: https://doi.org/10.3969/j.issn.1000-7024.2007.02.034

2007-01-01

Abstract:The Internet/Intranet emergence provided for the business enterprise a fast,efficiently,convenient network environment.But the security problem of network information system is more and more outstanding.PKI provide a real credible,steady,secure platform for secrecy application based on network.Firstly,the security problem of network and the architecture of PKI/CA system are discussed.The further improvement is made.A network information secure model based on PKI technology is designed and the safe system on net-work according to this model is set up.Finally,a practical instance of e-commerce is analyzed in detail.
Design and Implementation of the Railway Ticket and Reservation Network Security PKI Subsystem

刘培顺,王建波,何大可

DOI: https://doi.org/10.3321/j.issn:1001-4632.2004.06.021

2004-01-01

Abstract:A PKI based security scheme for railway ticket and reservation system is presented, from trust model, management system to security design. The proposed system architecture is composed of five parts—the center of issuing certificates or certificate revocation list (CA), the component that stores and publishes certificates or certificate revocation list (LDAP), the component that generates and manages secret keys (KMC), user registration management system (RA) and security management. This scheme not only supports secret key management and identity authentication of personnel and equipment, but also constructs secret key management center and manages encrypted key of the system. The communication security is ensured by digital envelope and communication is achieved by secure communication middleware. This system uses the role-based access control for identity authentication and authorization management.
A PKI/CA Model Design Based on Threshold and ECC

毛颖慧,施荣华

2012-01-01

Abstract:With the development of electronic commerce,how to implement the authentication of users on the Internet has become a very pressing issue,PKI authentication technology is used widely now,the certification authority（CA） is the core part of the PKI certification system.A PKI/CA design based on threshold and ECC is proposed in this article,the program is different from traditional program for the introduction of intrusion tolerance and combined with the elliptic curve cryptosystem and threshold to improve the reliability and security of CA system.
Research and Implementation for Enterprise's CA System and Network Security Strategy

LI Yong-jun,ZHOU Wen-hui

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.15.007

2006-01-01

Abstract:As the functions and ways of management are different between enterprise's CA system and standard CA system,it is hard for enterprise to design a network security system to keep secret,identify,digital signature and compress,but by making use of CA digital certification and current existed encryption methods synthetically and reasonably,a preferable network security strategy is achieved.On the base of the designed network security strategy,a prototype system for enterprise's CA system is studied and realized.Because the procedure of authentication in enterprise is less complicated than the reality CA system,the implementation of enterprise's CA system is not following the standard model.
The Design and Implementation of a Certificate-based Secure Multimedia Conference System MCS/CA

杨家海

DOI: https://doi.org/10.3969/j.issn.1000-7180.2003.12.020

2003-01-01

Abstract:After an overview of existing security control methods in CSCW systems, the paper proposes a new security control model which introduced the X.509 certificate-based authentication method into CSCW systems. Based on this model, the design and implementation of a secure multimedia conference system prototype, MCS/CA are discussed. In contrast to conventional conference system, MCS/CA enhanced integrated security control mechanism with certificate application, certificate-based authentication, session key negotiation, and data encryption/decryption.
Design of Public Key Infrastructure System

孟桂娥,董玮文,杨宇航

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.06.047

2001-01-01

Abstract:The thesis introduces the goal of the PKI system design ,analyzes the critical problems in PKI system development ,discusses the certificate-related data objects processing,the secure socket layer,the PKI interface of browser in detail.
Enhanced Security Certificateless Key Agreement Scheme Design

Na Li,Yun-wei Dong,Yu-Chen Zhang,Tian-Wei Che

DOI: https://doi.org/10.14257/ijsia.2015.9.12.09

2015-01-01

International Journal of Security and Its Applications

Abstract:An enhanced security certificateless key agreement scheme is designed in this paper. System building and the generation of user key and key distribution are described in detail. The analysis result of security and performance indicate that this protocol is highly secure and the performance is better than other similar protocols.
Study and Implementation of a Digital Certificate Authority Mechanism

宣蕾,吴泉源,王怀民

DOI: https://doi.org/10.3969/j.issn.1002-137X.2000.11.010

2000-01-01

Computer Science

Abstract:We studied and implemented a Certificate Authority(CA)server software to issue the Digital Certificate which uses for secure authentication over Internet in this paper,includes:generating the RSA key pair and management of the Digital certificate,e.g.generating a certificate request,generating a certificate,signing/verifying a certificate and revoking a certificate.Now the CA server that we implemented has passed the test.The conclusion is that the CA server measures up the correlative internationalstandard and it can offer the practical applications.
Design of E-Government Security Supporting System Based on PKI

丁惠春,谷建华

DOI: https://doi.org/10.3969/j.issn.1000-7180.2004.10.018

2004-01-01

Abstract:In order to ensure the safety of E-government System, we present the concept of the E-Government Security Supporting System (EG3S), analyse the architecture and key technique of EG3S, research and design EG3S based on PKI. As the basic platform of E-Government System, EG3S possess extensibility, easy-integration and general character, and has a comprehensive applied future.
Design of Secure E-mail System Based on CPK

张思高,王丽芳,蒋泽军

DOI: https://doi.org/10.19304/j.cnki.issn1000-7180.2008.06.053

2008-01-01

Abstract:Design a secure e-mail system based on CPK,which can get rid of the inherent defect of PKI-based security e- mail system.It can secure communication between any two users just through each other's identification(e-mail address) without relying on third-party certification;at the same time,it can be of good expansibility and make e-mail transmission safe,reliable and efficient.
PKI:Fundamental of Secure Electronic Commerce

Yajie Li,Qiufeng Wu,Meng Yuan

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.10.015

2001-01-01

Abstract:The development of electronic commerce requires the high security of network communication,PKI is an effective solution. This paper introduces basic structure,evaluation standard and major design problems of PKI.
The Design of Secure Document Management System

马晨华,陆国栋,钟云伟

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.19.022

2003-01-01

Abstract:This paper presents a three-tier secure document management system, using PKI, session key and RBAC. This system provides a key exchange protocol prolvodes in order to secure the encrypted documents in clients and only the users who own the proper key can read them. The middleware-tier constructs a RBAC authority database and utilizes SQL language to descript the constraint policies, providing an efficient way to implement role-based access control.
Secure E-mail System Design and Implementation

李菲,李晖

DOI: https://doi.org/10.3969/j.issn.1009-6868.2004.04.004

2004-01-01

Abstract:Email security is currently one of the hot-spot issues in network applications, drawing broad attention. Based on the analysis of the shortcomings of current email systems, this paper presents an end-to-end secure email system on Intranet, putting emphasis on the design of digital signature encryption, Lightweight Directory Access Protocol (LDAP) certificate server and system directory. At last, it gives solutions of implementing such a system on an enterprise Intranet.
A High Strength PKI Structure Designof Network Transmission

Jia ZHU,Yi HUANG,Jianhua CHEN

DOI: https://doi.org/10.3963/j.issn.1007-144X.2007.03.007

2007-01-01

Abstract:Focused on the present network communicating software,a high strength PKI structure is designed to guarantee the security of communication,as well as the secrecy and integrity.The security of this design of PKI,by encrypting and signing the message is introduced.This design mainly includes the certificate structure,the certificate application,the production flow,the user registers with the message transmission flow and so on.
Design of secure authentication and transaction protocol based on digital certificates and dynamic password

Jing Liu,Qingyu Chen,Jianwei Liu,Jianhua Chen

DOI: https://doi.org/10.1109/CSSS.2011.5974633

2011-01-01

Abstract:The secure authentication and transaction is one of the important parts in networking security. Because of the security flaws of some existing schemes, this paper proposes a secure authentication and transaction protocol based on digital certificates and dynamic password. The protocol not only can realize the mutual authentication of the client and server, but also can achieve secure authentication and secure transaction by combing digital certificates and dynamic password. Analysis shows that the protocol can effectively resist many attacks and improve the security of the system. © 2011 IEEE.
Research and Design of XKMS-based Centralizing Identity Management System

CAI Minye,JIANG Xinghao,LI Jianhua

DOI: https://doi.org/10.3969/j.issn.1009-8054.2007.03.020

2007-01-01

Abstract:Upon careful study of the XML Key Management Specification,the XML-Signature technology and the XML-Encryption technology,this paper proposes a solution of secure Web Services which is based on XKMS,and pro- vides a PKI service.And,this paper also describes the researches on certification registration process and certification validation algorithm.
Research and Implementation of Private Enterprise CA Based on Open Source Code

XU Feng,QI Yuguo,HUANG Hao,WANG Zhijian

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.05.046

2006-01-01

Abstract:This article analyses the demand of private enterprise CA(certificate authority),demonstrates the feasibility of setting up CA inside enterprises through designing and implementation of a PKI system,and puts forward a detailed method to hide complexity of PKI system.

A Design Scheme of Enterprise Secure Communication Platform

Design and Implementation of Self-certification of Digital Certificate Within the Enterprise

Inter-domain authentication scheme for Pervasive Computing Environments

Secure Information Exchange Model Between PDM Systems

Study and Design of Network Information Secure Model Based on PKI Technology

Design and Implementation of the Railway Ticket and Reservation Network Security PKI Subsystem

A PKI/CA Model Design Based on Threshold and ECC

Research and Implementation for Enterprise's CA System and Network Security Strategy

The Design and Implementation of a Certificate-based Secure Multimedia Conference System MCS/CA

Design of Public Key Infrastructure System

Enhanced Security Certificateless Key Agreement Scheme Design

Study and Implementation of a Digital Certificate Authority Mechanism

Design of E-Government Security Supporting System Based on PKI

Design of Secure E-mail System Based on CPK

PKI:Fundamental of Secure Electronic Commerce

The Design of Secure Document Management System

Secure E-mail System Design and Implementation

A High Strength PKI Structure Designof Network Transmission

Design of secure authentication and transaction protocol based on digital certificates and dynamic password

Research and Design of XKMS-based Centralizing Identity Management System

Research and Implementation of Private Enterprise CA Based on Open Source Code