基於X.509之公文交換協定

Abstract

為了使政府公文得以利用電腦網路以電子方式傳遞與交換，本研究以現行 紙上實體公文交換的流程與現行的安全機制為基礎，提出電子公文交換所 必需的安全需求，並據以評估現有的電子郵件安全標準與電子資料交換標 準的適用性。本研究另以ITU-T所建議的X.509識別架構為基礎，加以修改 ，自行規劃一電子公文交換安全協定，以滿足公文交換傳遞所必需的安全 需求，並提出一個我國電子公文交換系統芻議。 In the information age, governmental documents must be transmitted through the open networks, the Internet, to achieve efficiency for public-affairs administration. In this thesis, the author has studied the security mechanisms in the procedure of current paper-based systems. With such knowledge, the author assesses the adequacy of current standards for electronic data exchange (EDI), in particular those related to security issues. The author then presents a new protocol, which is based upon the X.509 authentication framework. The protocol satisfies the security requirements. A prototype system based on the protocol is also presented to the government of the Republic of China.