Research And Application Of PKI/CA In The Guizhou Local Taxation Bureau

The rapid development of E-government enables the government to shift its business from off-line to on-line.However,in the case of the openness of the network,the primary concern of the network security is to ensure the information security on the network and to ensure the integrity,confidentiality,authenticity,availability and non-reputation of the information transmission.In order to protect the security of information,the identification of the two communicating parties must be clear before the communication.Under the circumstance of the PKI/CA system,CA,as the core of the system,acts as the roles to work for the identification.At present,the system is widely used in all kind of fields.PKI(Public Key Infrastructure),provides a set of technical standard and regulations.CA(Certificate Authority),the carrier of the public key certificate,makes the connection between the public key and user identification.This paper first studied the encryption technology and its application,then the existing computer network architecture of vulnerability analyzes,making information security imperative on the protection of open networks.The superiority of PKI/CA makes it the first choice.In the choice of CA,through the comparison of different CA,combined with the actual situation and the characteristics of Windows Certificate Services Guizhou tax system,a self signed CA mechanism is finally built.In view of sets of the Guizhou local tax systems,for the convenience of a user can log into multiple systems by a login name and password,especially the the use of single sign on technology,to achieve a unified identity authentication system based on active directory.At the same time the use of WINDOWS system comes with Active Directory Certificate Services and directory service certificate management,and user roles to be assigned to the appropriate authority control,but also provides the corresponding interfaces and declared as other system services,it will ensure the system security also makes the system has good compatibility.In order to guarantee the high availability of the system,realization of the network load balancing and failover.