基于数字证书认证机制的应用研究

在计算机技术迅速发展的今天，网络和信息系统已经渗透到社会的各个领域。企业在享受网络带来的便捷的同时，也承受着伪造身份、信息窃取等网络攻击带来的巨大损失。PKI（Public Key Infrastructure）技术的出现，提供了一种全新的认证机制——证书认证机制，该机制支持双向认证，且认证过程没有敏感信息的传输，在企业内应用可以有效降低网络应用的安全风险。本文在详细阐述证书认证机制的基础上，研究了该机制在企业网络接入认证与业务系统SSL访问等方面的应用理论与技术实现，为企业实现安全的网络应用提供参考。

Study of the Application of Certificate Authentication Scheme

As the rapid developing of computer technology, network and information system have penetrated into every region of society. Enterprises endure huge expense caused by identity forge and information stealing while enjoying the convenience of network. The PKI（ Public Key Infrastructure） technology provides a new kind of authentication scheme, it is certificate authentication scheme. This kind of scheme provides bidi- rectional authentication, and does not transport sensitive information, so it can reduce the security risk of the network in enterprise. This paper explains the principle of certificate authentication scheme, and then discus- ses the application of this scheme to enterprise network access anthentication and SSL access of application system, technology relization is also presented. Results of this paper can be used for enterprises to realize the security of their network application.