公钥基础设施的架构及.NET下的设计开发

公钥基础设施(PKI)为保证网络的安全和通信的有效性，提供了可靠的环境。PKI使用公开密钥体制，为网络中各实体分发正确的公钥，从而各实体可以进行公钥加密和数字签名操作。文中介绍了PKI、CA及信任模型、证书库和证书的撤销机制，实现了基于.NET框架下的PKI应用系统的设计开发，并分析了在这种PKI应用设计中两实体间通信的过程。

Architecture of PKI and Its Design in .NET Framework

Pubic Key Infrastructures provide a more reliable environment to ensure network security and communication availability. PKIs use public key encryption mechanism and distribute proper public keys to each entity in the network,so that these entities can perform public-key encryptions and digital signatures. This article introduces PKI, certificate authority, trust model, certificate database and certificate revocation mechanism. The article also implements an outline design of PKI application system in .NET framework, and analyzes the communication process between two entities involved in this design of PKI.