关键词: 数字证书, 公钥密钥加密, 公钥基础设施, RSA算法, 优盾

Abstract:  PKI(Public Key Infrastructure) is a kind of system based on Public Key cryptography and digital certificates to provide system security services and verify user identity legitimacy. Based on the systematic introduction of PKI architecture and related technology implementation principle and functional characteristics, from the perspective of network attack and defense, this paper focuses on the analysis of RSA algorithm, USBKEY digital Certificate and CA (Certificate Authority) existing security problems, and puts forward the corresponding solutions and ideas. At the same time, from two aspects of technology and management, and from apply to the CA to the application of digital certificate, the paper focuses on the analysis of the possible security risks, and finally gives out specific countermeasures.

Key words: digital certificate, public key encryption, public key infrastructure, RSA algorithm, USBKey