Abstract:
This paper presents the certification authority(CA) system model, then sets up the CA system architecture based on the model, and implements the CA system under openCA framework, in accordance with specific requirements of IHEP grid environment. According to actual experiences of operations and maintenance of IHEP grid CA, it extends the utilities functions and enhances the system security.
Key words:
certification authority(CA),
registration authority(RA),
certificate revocation list,
end entity
摘要： 给出了高能物理研究所网格CA系统的工作模型，根据该模型搭建了体系结构，根据高能物理研究所网格环境的具体需求，在OpenCA的框架下实现了高能物理研究所网格CA系统，并在实际的运行和维护中拓展了功能模块，加强了系统安全性能。
关键词:
认证中心,
注册中心,
证书撤销列表,
端实体
CLC Number:
FAN Hua-xiang; GUAN Wen; CHEN Zhen-min; SUN Gong-xing; XU Rong-sheng. Design and Implementation of High Energy Physics-oriented Grid Certification Authority[J]. Computer Engineering, 2007, 33(20): 268-269,.
樊滑翔;管 文;陈桢黾;孙功星;许榕生. 面向高能物理的网格认证中心的设计与实现[J]. 计算机工程, 2007, 33(20): 268-269,.