摘要： 认证机构CA是电子商务和电子政务的基础设施,CA自身的安全是重中之重。该文从分析认证机构CA面临的安全威胁入手,从体系 结构、密码支撑、物理安全、网络安全、系统和数据安全等多角度、全方位考虑CA系统的安全体系设计。

关键词: 公钥基础设施PKI, 认证机构CA, 安全性, 网络隔离, 安全策略

Abstract: Certificate authentication is the infrastructure of E-commerce and E-govemment affair,thus the safety of CA is the most important.This paper analyses threat that CA is faced with , then it discusses the safety design of CA from much angle and each aspect such as system framework,cipher support,safe environment, safe network, safe data and safe system .

中图分类号: 

• TP393.08