Ca (Certificate Authority) is a trusted third party that generates and determines digital certificates based on pki (Public Key Infrastructure). Mainly according to the designer's strategy to issue identity certificates and manage the normal use of electronic certificates. Ca is authoritative, credible and fair, and bears the responsibility of checking the legality of public key in public key system. Ca issues a digital certificate to each user who uses the public key. The function of digital certificate is to prove that the user listed in the certificate legally owns the public key listed in the certificate. The digital signature of ca makes it impossible for attackers to forge and tamper with certificates. Ca is also responsible for revoking certificates and publishing certificate revocation lists (crl), as well as generating, distributing and managing digital certificates required by all online entities. Therefore, it is the core link of secure e-government.
Composition of ca authentication system
Ca authentication system consists of the following departments: First, ca is responsible for generating and determining the digital certificates of user entities. Second, the audit institution, referred to as ra(registry authority), is responsible for examining the qualifications of certificate applicants and deciding whether to grant them certificates. At the same time, it should bear all the consequences caused by audit mistakes and issuing certificates to unqualified people, and should be borne by institutions that can bear these responsibilities. The third is the certificate operation department. Cp (Certificate Handler) of Certificate Operation Department makes, issues and manages certificates for authorized applicants, and bears all consequences caused by operational errors, including confidentiality loss and issuing certificates to unauthorized personnel. It can be held by ra itself or entrusted to a third party. The fourth is the Key Management Department (km), which is responsible for generating the encryption key pair of the entity and providing hosting services for decrypting its private key. The fifth is the certificate repository (dir), which includes all the certificate directories on the Internet.
In the ca authentication system, the authentication relationship between components is generally as follows:
(1) Between the user and ra: When the user requests ra to audit, the user should submit his own identity information to ra, and ra will safely forward the information to ca after auditing the user's identity.
(2) Between RA and ca: RA should send the user's identity information to ca in a safe and reliable way. Ca sends the user's digital certificate to ra or directly to the user in a safe and feasible way.
(3) Between users and dir: Users can query and revoke certificate lists and digital certificates in dir.
(4) Between DIR and ca: ca directly transmits the digital certificate generated by itself to the directory DIR and registers it in the directory. Registering a digital certificate in a directory requires user authentication and access control.
(5) Between users and km: km accepts the entrustment of users and generates encryption key pairs on behalf of users; The encryption key of the certificate held by the user must be entrusted to the key management center for generation; Users can apply to decrypt the private key to restore service; Km should provide recovery service for users to decrypt private keys. The user's decryption private key must be managed in the key management center.
(6) Between CA and km: The communication between CA and KM must be confidential and safe. A communication certificate between them is needed to ensure security. A communication certificate is a computer equipment certificate used by a certificate authority when communicating with a key management center or a superior or subordinate certificate authority. These special computer equipment must apply for and install the special communication certificate issued by the certificate authority, and at the same time, they must install the communication key certificate held by the key management center, the special communication computer equipment of the superior or subordinate certificate authority and the root certificate of the certificate authority.
Responsibility of certification system
From the above discussion, it can be concluded that ca should at least undertake the following specific responsibilities:
(1) Verify and identify the identity of the entity whose public key information is submitted for authentication;
(2) Ensure the quality of asymmetric key pairs used to generate digital certificates;
(3) Ensure the security of the authentication process and the private key used to sign the public key information;
(4) To ensure that two different entities are not given the same identity, so as to distinguish them;
(5) Manage the certificate material information contained in the public key information, such as the serial number of the digital certificate, the identification of the certification authority, etc. ;
(6) Maintain and publish the list of revoked certificates;
(7) Specify and check the validity period of the certificate;
(8) Notify the entity digital certificate identified in the public key information that it has been issued;
(9) Record all steps of the digital certificate generation process.
Functions of ca security authentication system
The main functions of ca security authentication system include: issuing digital certificates, managing lower audit registration institutions, accepting business applications from lower audit registration institutions, maintaining and managing all certificate directory services, applying for keys from key management center, and managing entity authentication key equipment.
CA financial system is the CA certification of financial system.
I hope it works for you!
What is a certification system? What is certification?
The English meaning of the word "authentication" is the act of issuing certificate documents. The definition of "certification" in ISO/IEC Guide 2 is: "A third party gives a written guarantee (certificate of conformity) that a product, process or service meets the specified requirements according to procedures".
For example, for product A produced by Party A (supplier or seller), Party B (buyer or buyer) cannot judge whether its quality is qualified, but a third party will. The third party should be responsible and impartial to both parties, and the certificate issued should win the trust of both parties. Such an activity is called "authentication".
In other words, third-party certification activities must be open, fair and just in order to be effective. This requires that the third party must have absolute power and prestige, must be independent of the first and second parties, must have no economic interests with the first and second parties, or have equal interests, or have the obligation and responsibility to safeguard the rights and interests of both parties, in order to gain the full trust of both parties.
Take quality certification as an example:
Quality system certification is a kind of certification. Quality system certification has the following characteristics:
1, the object of certification is the quality system, more precisely, some elements in the enterprise quality system that affect the ability to continuously provide goods or services on demand, that is, the quality assurance ability.
2, the implementation of quality system certification is based on the needs of national standards for quality system. ISO1?????тт?тттттттттттттттттт10 Enterprises applying for certification should establish an applicable quality system under the guidance of system standards; Certification bodies conduct inspection and evaluation according to the requirements of quality management system standards in the series of standards.
3. The method to identify whether the quality system meets the standard requirements is quality system audit. Certification bodies shall send registered auditors to inspect and evaluate the quality system of the applicant enterprises, submit audit reports and put forward audit conclusions.
4. The way to prove the qualification of quality system certification is the quality system certification certificate and system certification mark. Certificates and marks only prove that the quality system of the enterprise meets the quality management system standards, but do not prove that any products produced by the enterprise meet the product standards. Therefore, the certificates and marks of quality system certification cannot be used for products, and people cannot misunderstand that the quality of products meets the requirements of standards.
5. Quality system certification is an activity involving the third party. The third party refers to a party independent of Party A (supplier) and Party B (demander). There is neither administrative subordination nor economic interest relationship with Party A and Party B.. It is emphasized that system certification should be implemented by a third party to ensure the fairness of certification activities.
What is the PICC authentication system? PICC refers to China People's Property Insurance Company Limited and China People's Property Insurance Company Limited (PICC P & amp； C, abbreviated as "China PICC", was established by People's Insurance Company of China with the approval of the State Council and China Insurance Regulatory Commission in July 2003, with a registered capital of 65.438+02.25598 billion yuan. Its predecessor was China People's Insurance Company, which was approved by the People's Bank of China and reported to the State Council Finance and Economics Committee on120. Fortune 500 companies. PICC Property Insurance in China is the iconic main business of People's Insurance Company of China (PICC), which enjoys an excellent reputation in the domestic and foreign peer markets. On June 6th, 2003, 165438+ Company was successfully listed on the Hong Kong Stock Exchange, becoming the "first share" of overseas listing of large state-owned financial enterprises in China. With its comprehensive strength, China PICC P&C has successively become the insurance partner of Beijing 2008 Olympic Games and Shanghai World Expo 20 10, providing comprehensive insurance services for Beijing Olympic Games and Shanghai World Expo.
What is the ISO certification system? Iso is the abbreviation code of the International Organization for Standardization. According to the management system standards issued by ISO, the organization's system documents (including manuals, program documents, operation documents and records) are established and implemented, and then audited and accepted by an independent third-party certification body, and certification certificates are issued as ISO system certification. Common ones are ISO900 1 quality management system, ISO 1400 1 environmental management system and ISO22000 food safety management system.
The purpose of establishing ISO900 1 quality management system is:
L establish corporate image
By establishing and perfecting the international quality system and strengthening and standardizing enterprise management, we can establish a good corporate image and create a good external environment for enterprise development. Establish a corporate culture with its own characteristics and enhance the corporate image.
Enhance customer confidence and expand market share
Prove to customers and society that your company has the ability to produce qualified and high-quality products and provide excellent services to satisfy customers. The certification bodies responsible for ISO900 1 quality system certification are all authoritative institutions recognized by national accreditation bodies, and the audit of enterprise quality is very strict. Therefore, for enterprises, management can be carried out according to the international standardized system, which can truly meet the requirements of legalization and scientificity, greatly improve work efficiency and the quality rate of products/services, and quickly improve the economic and social benefits of enterprises. For external enterprises, customers are familiar with the management of enterprises according to international standards, have obtained ISO900 1 quality system certification, have strict audit and long-term supervision by certification bodies, and can be sure that the enterprise is a trustworthy enterprise that can stably produce qualified products and services and even excellent products, and expand its market share.
L improve existing management
The resources (decision-making, management, technology and operation) of your enterprise should be sorted out and improved under the system of ISO900 1, so as to make up for the defects and omissions in management, establish a reasonable and effective organization, clarify the functions and powers of each department and improve the management level.
L Strengthen quality control and reduce costs.
Through the control of quality control points in the process of production and service, we can strengthen internal integration, reduce man-made losses, improve internal management, reduce management mistakes, and achieve the purpose of reducing physical cost opportunities and improving the market competitiveness of enterprises.
L sales management
Strengthen the management of market and regular sales and improve market efficiency through contract review procedures and human resource control and evaluation procedures.
In short, the first-class quality management system will bring more economical design, production, sales and administrative management to enterprises, that is, based on the increase of sales volume, higher customer satisfaction, increased income and overall improvement of key competitiveness.
What is ISO9000 quality system certification? ISO carries out technical activities through its 2856 technical organizations. There are * *185 Technical Committee (TC), * SC) * * 61+0 Technical Committee (SC), 2022 working groups (WG) and 38 special working groups. The technical activities (products) of 2856 technical institutions of nbspISO are "international standards". ISO has formulated more than *** 10300 international standards, mainly involving the technical specifications of various products (including service products and knowledge products) in all walks of life. In addition to standardized names, the international standards formulated by nbspISO also have numbers. The numbering format is: ISO+ standard number+[article+sub-standard number]+colon+publication year number (contents in square brackets are optional), for example: ISO 8402: 1987, ISO 9000- 1: 65438. Nbsp; however, "ISO9000" does not refer to one standard, but to a series of standards. According to the definition of ISO 9000- 1: 1994: "ISO 9000 family is all international standards formulated by ISO/TC 176." What is nbspTC 176? TC 176 is the technical committee of 176 in ISO. Established in 1980, the full name is "Quality Assurance Technical Committee". 1987 was renamed as "Technical Committee for Quality Management and Quality Assurance". TC 176 is responsible for formulating standards for quality management and quality assurance technology. One of the earliest standards formulated by nbspTC 176 is ISO 8402: 1986, named quality-terminology, which was officially released on June 1986. 1987 In March, ISO officially released ISO9000: 1987, ISO 900 1: 1987, ISO 9002: 1987, and ISO 9003:/kloc-0. Nbsp; Since then, TC 176 has issued another standard at 1990, three standards at 199 1, one standard at 1992 and five standards at 1993. 1994 did not publish other standards, but revised the above-mentioned "ISO9000 series standards" uniformly. Change them to ISO 8402: 1994, ISO9000- 1: 1994, ISO 9001:/994, ISO 9002: 1994, ISO 9002. In 1995, TC 176 issued another standard with the serial number of ISO10013:1995. Up to now, ISO9000 family * * * has 17 standard. See appendix a for details. Nbsp as an expert, you should be familiar with the above standards. As an enterprise, you only need to choose one of the following three standards: nbsp1.nbsp2.10902:1994 "Quality Assurance Mode for Quality System Production, Installation and Service"; Nbsp3.10903:1994 "Quality assurance mode of the final inspection and test of mass system". Introduction to nbspISO9000 standard. In recent years, the IS09000 family standard is being vigorously promoted throughout the country, and the quality system consultation and certification based on the S09000 family standard is being carried out. The release of "Quality Revitalization Plan" in the State Council has aroused the attention and attention of enterprises and quality workers to IS09000 family standards. Nbsp; according to the definition given by IS09000- 1, IS09000 family refers to "all international standards formulated by technical committee of ISO/TC 176". So how many standards have been formulated by ISO/TC 176 Technical Committee? The crowd is different. The accurate statement should be: there are 19 international standards formulated by ISO/TC 176 Technical Committee and officially promulgated by ISO (National Organization for Standardization), and there are 7 international standards not promulgated by ISO/TC 176 Technical Committee. ISO, as the international standard of IS09000 family 19, has been officially promulgated and all of them have been translated into China's national standards. China is also studying seven other international standards that are still in the draft stage. Once officially promulgated, China will promptly convert it into a national standard. Nbsp; formally promulgated IS09000 family standardnbsp; (1) GB/t65831994 (IDTIS 08402:1994) Terminology of quality management and quality assurance. Nbsp (2) gb/t 1 9000.1-1994 (idtls09000-1:1994) Selection guide for quality management and quality assurance standards. Nbsp (3) gb/19000.2-1994 (IDT is 09000-2: 1993) quality management and quality assurance standard part ii GB/T 1900 1, gb/. Nbsp (4) gb/t19000.3 ——1994 (id tls09000-3:1994) quality management and quality assurance standard part 3 gb/t1900/in software development.
What is the ISTQB certification system for testers? Here's the thing:
I. About the International Software Testing Engineer Certification Project ISTQB (International Software Testing Qualification Committee) The International Software Testing Qualification Committee is the only comprehensive and authoritative software testing qualification certification institution in the world, which is mainly responsible for formulating and promoting the international general qualification certification framework, that is, the "ISTQB Certification Tester" project promoted by the International Software Testing Qualification Committee. In this project, branches of countries authorized by ISTQB organize to certify their own software testing engineers and accept the quality control of ISTQB. After passing the test, the global software test engineer qualification certificate will be awarded. ISTQB has nearly 40 member countries, including the United States, Germany, Britain, France and Japan.
As an open organization, ISTQB sincerely welcomes enterprises and individuals to become its members, so as to promote the internationally accepted software testing qualification certification standards and standardize the software testing system. ISTQB standardizes the software testing industry in China, improves the level of software testing industry in China and promotes the development of software testing industry in China through market research, information exchange, consulting and training, evaluation and certification, and intellectual property protection. , serve ISTQB members well, face the whole industry, and play the role of a link and bridge between * * and enterprises and institutions. To provide an exchange platform for China's testing industry to research and popularize new testing methods and technologies, strengthen international exchanges and cooperation, actively promote the international software training and certification system, build a standardized high-level training and certification platform, promote the international software testing talent flow and technical exchanges, and make China's software testing industry in line with the international standards.
course content
The course content mainly includes: basic knowledge of software testing, testing and software development life cycle, static testing technology, testing design technology, unit testing, integrated testing, system testing, software testing management, function (black box) testing tools, efficiency testing tools, white box testing tools, and actual case analysis.
Four. Introduction of ISTQB certification system
Introduction of ISTQB certification system;
foundation level
1 Examination module (based on 24 hours of professional training)
Software testing terms and basic principles, testing techniques and common tools.
high(er) order
Pass basic certification+more than 3 years working experience in software testing enterprises.
3 module exams
The depth and development of software testing technology includes three modules: test management, advanced test analysis and advanced test technology. Trainers can choose one or more modules according to their needs, interests or career development direction. After 20 14, you must pass three modules to pass the advanced level.
Expert level
Pass more than 2/3 advanced certification module+more than 5 years working experience in software testing enterprises.
The depth and expansion of the field of software testing experts, such as
Test management
safety test
Test process improvement
What is the ISO900 1:2000: 2000 certification system? This is my major.
The ISO900 1:2000: 2000 you mentioned is a quality management system requirement and belongs to the ISO9000 family. 2000 refers to the 2000 edition.
Zhan O9000 family can help organizations to establish, implement and effectively implement quality management system, which is not limited by specific industries and economic sectors and can be widely used in organizations of all types and sizes.
The principles of quality management are: paying attention to customers, leading role, full participation, process method, system management method, continuous improvement, fact-based decision-making method and mutually beneficial relationship with suppliers. These eight principles should always be implemented when conducting certification.
I can't explain it to you here. You should read more books on this subject.
What is iso90000 certification system? Wan O9000 refers to the quality management system family standard formulated and promulgated by the ISO/TC 176 Working Committee of the Technical Committee for Quality Management and Quality Assurance of the International Organization for Standardization (ISO).
Among the ISO9000 family standards, there are standards to guide enterprises to establish quality management system and obtain external certification (ISO900 1:2000: 2000), standards to guide enterprises to strengthen quality management (ISO9004), standards to unify quality terms in various countries (ISO8402) and standards (ISO10065438).