公钥基础设施是目前网络安全建设的基础与核心,是电子商务安全实施的基本保障,文中分析了PKI技术,提出了一种基于PKI体系结构的身份认证模型的方案,给出了其流程图。该身份认证系统利用PKI技术,并结合数字签名的原理来进行通信双方身份的识别,并采用权威机构CA发放的证书作为通信双方的身份标识。 Public key infrastructure is the foundation and core of network security construction at present. It is the basic guarantee for the implementation of e-commerce security. In this paper, PKI technology is analyzed and a scheme of identity authentication based on PKI architecture is proposed. The flow chart . The identity authentication system uses the PKI technology and the principle of digital signature to identify the identities of both parties in the communication and adopts the certificate issued by the CA of the authoritative organization as the identity of both communication parties.