Abstract: At present, the main research fields of security technology are network security, security protocol and encryption arithmetic.The research of security of application layer is want, and ongoing research projects is part application oriented, such as safe mail system, safe document system. This paper designed a web application security total solution based on pki/pmi, to implement security control for application layer, and proposed the implement method by an instance.

Key words: PKI PMI Web application

摘要： 目前，对安全技术的研究主要集中在网络安全、安全协议和加密算法等方面，对于应用层安全的研究相对较弱，现有少量研究也是针对具体应用的，如安全邮件系统、安全公文系统等。本文利用PKI/PMI技术，设计了一个Web应用安全整体方案，实现应用层的安全控制。并通过一个实例来说明具体web应用安全访问控制的实现方法。

关键词: PKI PMI Web应用