PKI/CA技术综述

公开密钥基础设施(PKI)是解决网络安全的技术．典型PKI应用系统包括安全Web、注册机构(RA)、认证机构(CA)、目录(LDAP)和数据库等服务器．RA验证客户证书申请后提交CA．CA检查信息完整和数字签名正确后把证书存放到证书库和目录服务器，并将签发证书序列号通知客户和RA．客户即可使用该号通过目录服务器下载证书．1993年以来，美、加、欧洲、韩、日等国已相继展开PKI研究．我国2001年将PKI列入十五863计划，并着手解决PKI标准化、CA互联互通等关键技术问题。

Summarization on PKI/CA Technology

Public key infrastructure (PKI) is one of the important techniques for solving network security problem. The typical PKI application system includes security Web server, registration Authority (RA) server, certificate Authority (CA) server, LDAP server and database server. After validated the requisition from user, RA submits it to CA. Then CA creates certification and puts it into the certification database and LDAP database after the integrity of RAs requisition and the legitimacy of RAs signature is certified. America, Canada, Europe, korea and Japan have made scientific researches on PKI successively since 1993. China have ranked PKI as the 15th 863 Program in 2001 and set about to solve the problem of the PKI standardization and the critical technique of interlink and communication of CAs.