| 研究生: |
包志偉 Pao, Chih-Wei |
|---|---|
| 論文名稱: |
多元憑證驗證平台之研究 Study of Multiple Certificate Verification Platform |
| 指導教授: |
黃悅民
Huang, Yueh-Min |
| 學位類別: |
碩士 Master |
| 系所名稱: |
工學院 - 工程科學系碩士在職專班 Department of Engineering Science (on the job class) |
| 論文出版年: | 2005 |
| 畢業學年度: | 93 |
| 語文別: | 中文 |
| 論文頁數: | 96 |
| 中文關鍵詞: | 多元憑證驗證平台 |
| 外文關鍵詞: | Multiple Certificate Verification Platform |
| 相關次數: | 點閱:95 下載:1 |
| 分享至: |
| 查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報 |
隨著電腦與網路科技日新月異,由於其快速及無遠弗屆的特性,讓使用者的人數愈來愈多,相關的應用服務系統也變得更加多元化,使得傳統的社會活動亦逐漸融入網際網路,而其安全問題長久以來受到各界重視,藉由密碼學技術來提高安全性,已經是一種普遍的做法。
其中身分識別是安全性考量不可或缺的要件,常見的身分鑑別方式稱為電子簽章技術,而數位簽章係屬電子簽章技術之一種,藉由數位簽章技術的應用,通訊或是交易雙方身分認證的信賴基礎,植基於確認雙方公鑰憑證之有效性。如何讓此身分識別技術更為方便使用,降低技術門檻,會是一個重要的課題。
建立多元憑證驗證平台做為驗證各種公鑰憑證有效性的代理機制,如此一來,讓應用系統、企業或民眾可以不用自己去面對檢驗各種公鑰憑證有效性的問題,而將檢驗各種公鑰憑證有效性的工作,委託給多元憑證驗證平台來代為執行,以淢輕應用系統、企業或民眾的負擔,有助於電子化政府、電子商務的發展。
As the technology of computer and network changed recently, its fast and borderless characteristics have attracted more and more users to apply the technology to a variety of relevant service system. Gradually, the traditional social activities have incorporated the Internet technology to make them more efficiently. However, the network secure problem has existed for a long time. There are some cryptography technologies proposed to attack the problem.
Among them, the identification is one of the security that is indispensable. A common authentification called electronic signature is one kind of the technology involving digital signature technology, communication, transaction trust foundation, and identity of authentication. It is on the basis of the validity of confirming certificates of both sides. How to make this technology be more convenient to use, reduces the technological threshold? It will be an important subject.
It is required to build the Multiple Certificate Verification Platform to be an agent for different certificate validity, so that the application system, enterprise or user do not need to face the problems of different certificates validity. The thesis will examine the work of different certificates validity, and prove the platform. It will reduce burdens of the application system, enterprise and user, and contribute to the development of electronic government and e-commerce.
[中英文獻]
[1] 陳彥學,資訊安全理論與實務,文魁資訊股份有限公司,2003
[2] 賴溪松、韓亮、張真誠,近代密碼學及其應用,旗標出版股份有限公司,2003
[3] 張真誠,電腦密碼學與資訊安全,松崗電腦圖書資料股份有限公司,1999
[4] 林祝興、張真誠,電子商務安全技術與應用,旗標出版股份有限公司,2003
[5] 龍國忠、洪月裡、洪國勝、江國軍,C++ Builder 6程式設計快樂上手,旗標出版股份有限公司,2002
[6] 陳俊源,C++ Builder 6資料庫程式設計,旗標出版股份有限公司,2002
[7] Charles Petzold,Programming Windows Fifth Edition,Microsoft Corporation,1999
[8] Jeff Prosise,Programming Windows with MFC Second Edition,Microsoft Corporation,1999
[9] 葛湘達,ATL COM程式設計,碁峰資訊股份有限公司,1999
[10] 謝兆陽、李勁,SQL Server 2000資料庫設計與系統管理,文魁資訊股份有限公司,2000
[11] 侯俊傑,Win32多緒程式設計,碁峰資訊股份有限公司,2000
[網站資料]
[12] 經濟部商業司,電子簽章法,http://www.moea.gov.tw/~meco/doc/ndoc/s5_p05.htm
[13] 內政部,自然人憑證管理中心,http://moica.nat.gov.tw/html/
[14] 經濟部,工商憑證管理中心,http://moeaca.nat.gov.tw/
[15] 行政院研究發展考核委員會,政府憑證總管理中心,http://grca.nat.gov.tw/cindex.htm
[16] IETF,Internet X.509 Public Key Infrastructure Certificate and CRL Profile (RFC 2459),http://www.ietf.org/rfc/rfc2459.txt
[17] Microsoft Corporation,Microsoft Platform SDK,http://msdn.microsoft.com/library/default.asp
[18] OpenSSL Organization,OpenSSL Cryptography Library,http://www.openssl.org/
[19] IETF,X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP (RFC 2560),http://www.faqs.org/rfcs/rfc2560.html
[20] RSA Laboratories,PKCS Home,http://www.rsasecurity.com/rsalabs/node.asp?id=2124
[21] RSA Laboratories,A Layman’s Guide to a Subset of ASN.1, BER, and DER,http://luca.ntop.org/Teaching/Appunti/asn1.html
[22] ASN.1 Consortium,ASN.1 Resources,http://www.asn1.org/resources.htm
[23] 全景軟體股份有限公司,多憑證驗證系統VA,http://www.formosoft.com/NS/va.html
[24] 資通電腦股份有限公司,uPKI前置憑證驗證服務系統,http://www.ares.com.tw/pki/authserver.asp