CAJ | 학술논문

公钥基础设施是目前网络上提供安全保证的主要手段，为网络应用搭建相互信任及数据安全的基础平台。在中国PKI/CA的建设中，存在CA繁多、地域性和行业性明显等特点。为了减少重复建设的费用以及因为证书标准不同造成的使用障碍，需要设计一套能灵活配置的CA。文中通过基于参数策略库的通用接口框架，实现了CA系统运算算法、证书编码和存储介质的可扩展性。
공약기출설시시목전망락상제공안전보증적주요수단，위망락응용탑건상호신임급수거안전적기출평태。재중국PKI/CA적건설중，존재CA번다、지역성화행업성명현등특점。위료감소중복건설적비용이급인위증서표준불동조성적사용장애，수요설계일투능령활배치적CA。문중통과기우삼수책략고적통용접구광가，실현료CA계통운산산법、증서편마화존저개질적가확전성。
PKI/CA is still the main method of web security and builds up a basic platform of mutual trust and secure data for web application. In domestic PKI/CA building,there exist some obvious characteristics like CA variety,regionalism and industrialization. To reduce the expense of repeated building and the inconvenience resulted from different certificate standard,it is necessary to design a set of flexible CA. This paper describes how to realize the expansibility of CA system algorithm,certificate coding and storage medium through the universal interface based on parameter policies.