摘要： 当PKI技术应用于企业或政府信息化时，它必须与其它业务系统集成。采用与业务系统相一致的关系型数据库，有利于不同系统的集成。当CA系统采用关系型数据库和浏览器/Web应用服务器/数据库服务器3层结构时，证书相关信息的查询可以通过HTTP协议简单实现，LDAP和OCSP引擎可以使系统与标准协议保持兼容。另外，在这种结构下，通过引入基于关系型数据库的角色、权限管理机制，可以大大简化CA/RA的管理，使系统的运行和维护更加容易。

关键词: 公钥基础设施, 认证中心, 关系型数据库

Abstract: When the technology of PKI used in business systems of corporation or government, it must integrate with other business system. Integration of different system can benefit from the structure consistency, if all of the systems are based on relational database. Query of certification information can be done through HTTP protocol, if the CA system is based on relational database and three layers structure, browser/web server/database server. LDAP and OCSP engines make the CA system based on relational database consistence with protocol criterion. If inducting the role/right mechanism based on relational database into CA system, the management of CA/RA can be much simplified, running and maintenance of the system can be easy.

中图分类号: 

• TP393.08