基于数字证书的身份认证系统的设计与实现

摘要

身份认证技术是能够对信息收发方进行真实身份鉴别的技术,是保护网络信息资源安全的第一道大门,在安全系统中的地位极其重要.提出了一种基于数字证书进行身份认证的方法,构建了身份认证系统模型方案,采用OpenSSL软件包,Ubuntu作为服务器操作系统,Tomcat作为WEB服务器软件,设计一个基于数字证书的身份认证系统,以网站登录注册系统为例实现身份认证.本系统由四大模块组成,有登录模块、注册模块、数据加密模块、数字证书处理模块,能够实现用户身份认证.系统模块实现结果表明,该系统安全可靠、易维护,具有良好的可扩展性.%The identity authentication technology that can authenticate the identity of the sender and receiver is very important in the security system. As a first security guard, it is used to protect the network information resources. It puts forward the designing methods of the identity authentication system, constructs a model scheme and employs OpenSSL software package,Ubuntu as server operating system, Tomcat as web server software to design and implement a network identity authentication system based on digital certificate. Meanwhile an example which is a website login registration system is given to introduce how to implement identity authentication. This system which consists of four modules includes login module, registered module, data encryption module, digital certificate processing module. It can be used to identificate users who are using system. The system has good safety, easy maintenance and good expansibility.