基于CA的雷达情报传输安全认证系统的设计与实现*

介绍了基于CA的雷达情报传输安全认证系统的整体结构及工作流程,设计了CA中心各个模块的组成和功能;使用VisualC 6.0开发工具与OpenSSL-0.9.8e开源包,实现了一个原型系统,研究了生成根钥证书,用户证书、证书吊销列表的方法和流程,为所有通信实体提供了密钥长度2048bit并遵从X.509v3标准的RSA数字证书;利用AES算法加密用户证书,结合SQLServer数据库,保证了证书的安全存储;最后探讨了USBKey智能钥匙在证书分发中的应用思路。

Design and Implementation of Radar Intelligence Transmission Security Authentication System Based on CA

This paper describes the integrated framework and working flow of radar intelligence transmission security authentication system based on CA; Composition and function of each module is designed. A prototype system is implemented by VC 6.0 and OpenSSL-0.9.8e source package. With the methods and flow, the root key certificate, user certificate, CRL(certificate revoke list) etc have been bulit, every communication entity can obtain RSA digital X.509 certificate which length of secret key is 2048bit; Combined with SQL Server database, user certificate is encrypted by AES to ensure the secure storage; Finally how to distribute certificate by usb agent key system is disscussed.