電子證書授權(quán)中心的安全性評估

1、復(fù)旦大學(xué)碩士學(xué)位論文電子證書授權(quán)中心的安全性評估姓名：楚春波申請學(xué)位級別：碩士專業(yè)：計(jì)算機(jī)組織與系統(tǒng)結(jié)構(gòu)指導(dǎo)教師：張世永2000.5.1AbstractW油thedevelopmentofcomputerscienceandtechnologyesptherapidgrowingofInteracttheworldisnowfacingtheproblemofhowtoprotectinformationagainstmalicious

2、accessandmodification，whichisbecomingmoreandmoreseriousBasedonpublickeycryptographicalgorithms，CertificationAuthority(CA)couldestablishthetrustrelationshipinPKIbyissuingpublickeycertificatesandproviderelatedservicesPlayi

3、ngasthesignificantproviderandguardoftrustandsecarityinInternet，CAs，aspartofPⅪ，supplyECommercewithnecessaryuseridentification，verification，andencryptionofdatastoredandtransfefredThustheyarebecomingwidelyusedinthecomingfew

4、yearsLikeanyotherITproduetCAimplementationiSavailableinformofasetofsoftwareand／orhardwareIfunauthorizedindividualcallaccesstherootprivatekeyofaCAinacertainwaythewholetrustsystemwilloncomltarextremelyriskofbeingdestroyedc

5、ompletelyThisisthesecurityproblemofCAitselfSecurityevaluationsperformedbycertifiedthirdpartyevaluationfacilitiesagainstrecognizedsecuritycriteriaareinstrumentalinestablishingtrustinPI(Itechnology111cyallowunbiasedsecurit

6、yexpertstoanalyzethesecarityfunctions，interfacespecifications，guidancedocumentationanddesignoftheproductThefundamentalofITsecurityisgiveninthebeginningofthisthesis，followedbytheintroductionofthemajorcriterionforsecuritye

7、valuationofITproductsAsthe1SO’SstandardCommonCriteriaisthemostcompleteevalu撕oncriteriatodayandhasbeenrecognizedbyEurope，NorthAmericaandChinaAfterprovidingthebasictheoryofCCandtheevaluationmodel，ageneralSecurityevaluation