1. Introduction

The Fisherman Industry-level Digital Certificate Authentication system is a cryptographic system independently developed by Shandong Fisherman Information Technology Co., Ltd. The system mainly includes certificate authentication system (CA), certificate registration system (RA), key management system (KMC), online certificate query system (OCSP) and other core subsystems provide users with full lifecycle management of digital certificates and user encryption key pairs. The system could provide user registration management, generation and issuance of certificate/certificate logout list, storage and release of certificate/certificate logout list, certificate status query, key generation and management, key recovery, process security audit, and other certificate management services.

2. Features

The certificate authentication system(CA) includes a system security management platform and a business service system. System security management platform implements root CA establishment, CA system management, RA system management, issuance policy management, administrator management, rights management, system configuration service, template management, secure communication management, cryptographic device management, system status view, certificate life cycle management, audit management, query statistics management, monitoring management, etc. The business service system is responsible for receiving the certificate request of the registration management center, completing the certificate and certificate blacklist issuing service, and returning the issued digital certificate to the registration management system.

The certificate registration system (RA) is a remote registration and auditing system. Its functions include user information entry, user information review, user information management, rights management, certificate application, certificate cancellation, certificate update, certificate loss reporting, and certificate loss cancellation, encryption key recovery application, etc. The certificate registration system can send the request information to the CA center through the SSL channel for certificate issuance and certificate publish.

The KMC system provides key services for the certificate authentication system. Its subsystems include a system security management platform and a key service system. It implements functions such as key generation, key distribution, key recovery, key management, and judicial forensics.

The system can query the status of the certificate in real time.

3.superiority

Support multiple algorithms

Support using SM2 algorithm for certificate issuance

Support using RSA1024、2048bit algorithm for certificate issuance

Support SM1 Symmetric Algorithm.

Support SM3, SHA-1 Hash algorithm

High Performance

Support millions of CA storage capability.

Support 500 Concurrent threads

Hierarchical and modular design, the system has good scalability.

Users can flexibly deploy the system according to the construction scale.

Adopt rich client technology with B/S architecture

The interface is simple and easy to use, providing users with a higher and more comprehensive network experience.

The system is completely self-developed.

The crypto machine, crypto card, USBKEY, VPN and other cryptographic devices and system software used in the system are all independently developed by Fisherman, and the equipment has passed the certification of the State Cryptography Administration or the Ministry of Public Security.

The system is completely based on cryptographic technology.

VPN encryption channel is adopted between CA and KM to ensure the security of data transmission.

The communication between RA and CA, CA and KM adopts data encryption and digital signature technology to ensure the confidentiality, integrity and operational behavior of the data.