Download as pdf
Download as pdf
You are on page 1of 26
http: // docs. 4share. vn ‘Thye hanh: Mot sé giao dich ding chit Ky dign tir Tai ligu the hanh nay trich trong chiong trinh dao tao ” bdo mét tric tuyén 2006 Khai nigm vé chit ky sé (chit ky dign tit): Chir ky sé hay cdn goi IA chit ky dign tir c6 thé duge hinh dung tuong ty nhur chit ky viét tay. Chit ky dign tir duge sit dung trong cfc gino dich dign tix. Xuit phat tir thye t8, chi ki dign tir cing cin dim bio céc chitc ning: xéc dinh duge ngudi chi cia mét di ligu nio 6: van ban, anh, video, ... va dit ligu 46 trong qué trinh chuyén nhjin ¢6 bj thay doi hay khong. ‘Tém Iai, mye dich chinh cita chit ky sO nhim ngan chin vige thay Adi trong céc tai ligu va cing 18 dé thy hign vige kiém tra ti igu e6 thye sy duge giti boi cha thé cin giao dich hay khony Chir ky s6 ding ky thugt ma hoa khéa cng khai va khéa ring (public key/private key cryptography). Ban c6 thé cung cp khéa céng khai cia ban (public key) dén bit cit ngudi ndo cin nd, ‘Nhung kha rigng (private key) thi chi c6 ban li ngudi nam git. Vi du co’ ban: Mike ¢6 hai khéa, mt khda céng khai vai mot khéa rigng. Mike dura khoa cng Khai ciia minh cho Amanda, nhung gift Iai khéa rigng cho minh. Khi muén chuyén tai ligu cho Amanda, Mike o6 thé xde nhin (ky) céc tai ligu nay ding chinh khéa riéng cia minh va giri ching dén Amanda. Amanda sau €6 sé ding khéa cng khai cia Mike, 48 c6 thé kiém tra ti ligu ma c6 y nhan duge, thye sy duge giri boi Mike. Ung dung thir nbét: ding chit ky dign tir cho Email Ching ta hay bat tay vio img dung cy thé sau day 48 hiGu r6 hon vé céch thie ding chit ky dign tir trong mot giao dich thong thutmg. ‘Trong mé vi dy nay, chting ta cin 2 t2i khodin e-mail dang POP3, ‘Tai khoan e-mail POP3 thir nhit duge xéc lip cho Mike (trong vi du nay Mike s@ ding dé siti email va tai khoan thir hai xéc lap cho Amanda (Amanda sé ding dé nhiin e-mails va kiém tra chir ky dign tir nhim xe dinh ce mails nay ding 14 dén ttr Mike ) Cn kiém tra két n6i Internet di san sang cho vige giri va nhan e-mails. Xin nhac lai, Mike chinh la ngui giti (sender) va Amanda sé la ngudi nln mails (receiver). Trong vi du may, website eta edng ty ce phin Storks va cée ti Khodin emails eva ho duuge mot nha cung cép dich vw/hru trir Web (web hosting service) trén Internet duy tr, Nh cung cép dich vy Web cung cap cho céng ty Storks cae théng tin vé tai khoan email cho Mike va Amanda, nhimg tai khoan sé duge sir dung trong vi dy ny. Tat cé nbin vign diing e-mail http: // docs. 4share. vn tai Storks déu ding Outlook Express holic Microsoft Outlook 1 chuong trinh Mail client ‘mae dinh eita minh. CA dt mOt tai khodin email POPS 1. Mike sir dung Outlook Express 1a chyong trinh mail client mic dinh cia minh, Dang hap vao Windows XP Computer ciia minh (Pro-1). ‘MG Outlook Express tir menu chon Tools, chon Accounts. Merk For Offine Address Book... ‘dd Sender to Address Book Message Rules GA Sent Items QL Deleted th 2. Click vao Mall tab sau dé chon Add, chon tiép Mail. Sau d6 wizard sé huréng din Mike timg buée dé dign name, email address va thong tin vé tai khodn POP3. cac thong tin vé tai khoan mail durge cung cap boi ISAP hoge nha cung cap dich va Web (web hosting). Lim y: Ban cin cai de thém mx tai Khodn POP3 thit hai danh cho Amanda theo cing ccdch thie trén dé kiém tra chit ky dign tir ctia cde tai ligu nhdn doe tie email ciia Mike. ‘Thué mot ching chi s6 c4 nan (personal certificate) tir mOt nha cung cp chimg chi 6 cing eng (public CA) 3, Bude ké tiép, dé ¢6 thé giti mail vei chi ky dign tit, Mike ean lién hé va thu chimg chi s6 4 nhdn tir mot nha cung cdp chimg chi s6 tin edy (trusted public CA), ching han nhur http: // docs. 4share. vn Verisign hay Thawte, Thué chimg chi s6 tir bén cung cp thi ba rd party) duge dinh sid tin céy 14 digu cin thiét néu ban mudn chuyén email an toan dén mot nguéi nhin hong cing trong t6 chitc ciia ban. Vi théng thuéng, trong m@t t6 chite, dé dim bio an ton cho cée giao dich noi b} ding chit ky dign ti, td che d6 thudmg sit dung dich vu cung cép chimg chi s an toan cia riéng minh (vi du cai dat va trién khai dich vu cung cp chitng chi sé Certificate Authority -CA, trén Windows Server 2003) . Tuy nhién nha cung cp chimg chi s6 cue b@ nay khdng thirimg duge sir dung cho céc giao dich dign tir ‘éi cdc giao dich khong cing t6 chite cia ban. ; : inh vi nhimg IY do nay, nén céng ty Storks 4% quyét dinh sit dung chimg chi s6 cia nha cung cip Thawte (www.thawte.com), dé trang bi cho Mike trong ede giao dich email dng chimg chi s6 cf nban, ‘VA Mike c6 thé ding ky cho minh mét thi khodn Personal Email Ce t ign phi tai day. Truy cép weblink sau va tién hanh dng ky dé nhan chimg chi s6 c& hin (thttp:/iworw thawte. com/secure-email/personal-email-certficates/index.html Lamu ¥ quan trong: ‘Ban phai cung c4p cho Thawte théng tin c4 nhan dé xéc dinh ban. Cac thong tin nay 1 http: / docs. 4shar e. vn cn thiét va s@ duge cée he théng CA ciia Thawte xir ly trong tién trinh cép phip ching chi sé cho ban. Dim bio phiii doc tit ca cée thing tin vé vige cung cap chimg chi sé trén Website cia Thawte va biét nhimg vige gi cin thiét phai thye hign trong suét qué trinh dang ky. Ban cin cung cp théng tin c4 nhan va tra loi 5 céu héi xée nh§n cho chinh minh.Sau khi 44 thy hign ding kj, ban s® nhfin mot email tr Thawte v6i nhimg hucmg din ey thé cach thie hodn thinh vige xin cp chimg chi s6. Sau quy tinh nay, ban sE nhjn tip mpt email Khe xe nhan chimg chi s6 cd hin cha ‘Thawte di duge cép cho ban. Chi can click vao céc link trén Email nay va tign hah cdi . Click Yes va OK khi thong béo Certificate Installation Complete xuiit Fe ER tw Fact Tae Heb eee DAA Owe gow 9 OTA ses [el pope iron ter ponder aE 3] ee [usm Install Your MSIE Certificate apg awa you eta eee wh yout rennet waren to cencate downoad Ya Your ceria canbe wed wa Outlook 98 ae Ooo Express > see you ema ung the MAME manda Lieto sonics Personal Certificate Installed. ‘See Tools->Internet Options->Content->Certficates Xe nhan dign tir cho ede emails ‘M6t Khi chimg chi s6 cé nhiin cho email da duge cai dat , ban c6 thé ding né lam chit ky 6 va ma héa cfc email giti di. http: / docs. 4shar e. vn 1. Mé Outlook Express diing tai khodin email POP3 du tién da tao 6 trén. Chon Tools, chon Options va chon Security tab. Trén tab nay, chiing ta s& e6 mot ty chon encrypt and digitally sign your outgoing messages. Click Apply va OK. 2. Click vao Create Mail va ban sé thay biéu tugng ruy bang 46 & g« shai. Digu nay c6 nghia 1A email ma ban giti di sé duoc xdc nhin v6i chit ky s6. dién vao To: ngudi niin dia chi email Ia Amanda (email POP3 thir 2 ban to) Sau d6 click Send. 3, Chuyén dén t8i khodn email POP3 ciia Amanda vA mé email nhin duge tit Mike. Ban sé thdy message ma Amanda nhgn s® tuong ty man hinh bén ducéi. Click vao Continue 4 xem thdng digp thye sy. Seeunty Help Digtaly Signed Message, esaal vont es oo bt oe ater a resp Fees se Da ste see OPA ‘rotSoutanene siesta Smasra mestps ns Sept ss po ae Anrecborsnnacorirorepe le seteadn sexe argc iwi Te ci uth Siiede Dut menage ras enpuoontnernar =e Ban hay dé y ruy bing mau 46 géc phai trén cia mail. Digu nay cho Amanda biét rin ‘Mike di tién hanh giti mail nay dng chit ky s6. Click vao biéu twgng ruy bing Dé 4 xem chit ky s6 tir ngudi gti (sender). Kiém tra ya thay rang n6i dung mail d& khong bj thay déi va chit ky sO nay 1a dng tin edy. C6 thé xem thong tin vé chimg chi s6 ca nhan ciia sender bing cach click View Certificate. ‘MG héa Emails Mi héa 1B mot phuong phip bio mat thye hign vige chuyén d6i dit ligu tir dang thong thudng (plain text) thanh dang khéng thé doc theo eich thong thurong (unreadable text) nhim dam bao sy cin m§t (confidentiality), tinh tich hgp (integrity) va tinh chat xdc thye (authenticity) ciia dir ligu . Khi ban ma héa email, thi toan bo email s& duge ma héa bao ‘gm phan thong digp va cac file dinh kém (attachments). M@t chit ky s6 s8 dim bio tinh chit xc thye (ding la ngudi giti) va tinh tich hyp (di ligu da KhOng bj thay 464) nhung Khéng dim bio duge tinh chit bi mat (confidentiality) vi noi dung mail di khong duoc ma hoa 1, Mé Outlook Express diing tai khodn mail POPS thir 2 tire ciia Amanda’. Chon, Tools, chon Options. Click vao Security tab. Banh déu vao hp Encrypt contents and attachments for all outgoing messages. Click Apply va OK. http: / docs. 4shar e. vn 2. Click vio Create Mail va sé thy xudt hign biéu tuong 6 khéa lock 6 g6c trén bén phai. Diéu nay c6 nghia 1a email cua ban sé durge ma héa khi giri. Dién vao dja chi email ngudi nin Bi tai khodn POPS ciia Mike va click Send. 3. Quay tré lai ti khodn mail POPS cia Mike vi mé email mi Amanda vira giti khi ban ‘mé email, ban sé nhin durge mot thong digp An application is requesting access to a protected item. http: // docs. 4share. vn @ TH message has peer] ao inen you receive an enf ‘5, Ben c6 thé click bidu tugng 8 kha mau xanh 43 xem thong tin chi tiét hon v8 email 4% ‘ma héa, Amanda i khong xéc nbn chit ky s6 cho message nay nén tgi Digital Signature tit ca cée dong déu xée nhén khong sir dung na (not available). htt / docs. 4share. vn ae GK | eer a De Soh taka famed fet copes tek | Abt ee on i >) a Mtascner Seewed| De Seen | Paes pois Dotson ae ee es scan TEST ome me Soames ey SSNs a pd bencatn dnt aa Wing dung thit hai: Dang PGP a ma héa files PGP (Pretty Good Privacy) 1a phin mém mi8n phi cung cdp kha ning ma héa PGP trong: giti nhfn email va truyén file hang dau hign nay. Tuy nhién néu sir dung cho mye dich thyong mai, ben can mua phién ban thuong mai ciia PGP bao gdm nbiéu tinh nang hon so ‘voi phién ban mién phi. Myc dich chinh cia PGP 1 ma héa files nhim dam bao an toan hi duge truyén qua Internet. \Véi PGP Freeware chi due sir dung gi6i han nhur sau: + Due sir dung mang tinh chét cé nhan tai nha, khéng lign quan dén cde host déng sinh Ji nhudn (nhur tai moi trudmg eta cong ty) + Sinh vin tai céc truvmg, hoe vign phi loi nhuin + Céc h6i tt thign, céc vign, t6 chite phi loi nhudn C6 thé download phién bin mign phi cia PGP tai weblink sau: (> httpy/vww-pgp.com/products/freeware.html Cai ait PGP 1. Ding nhép vio Windows XP c6 tén Pro-I ciia ban véi quyén Administrator va hoi d6ng quy trinh cai dit PGP bing céch click dip vio File http: / docs. 4shar e. vn download. Click Next, dgc cic théa thuin vé License, click Yes. Man hinh Read. ‘Me xuat hign, click Next sau khi doc xong phan nay. Chon No, I’m a New User, ‘vi ban 1a ngudi mdi sit dung, cha timg tao va sir dung cfc kh6a cia PGP truée 6 (pre-existing keys). fen ao User Type > Pleas telus f you have existing PGP Keyings would keto use, ~ 2. Gilt nguyén céc gid tri mic dinh cho Destination Folder va click Next. Chon cic ‘thanh phan nh hinh minh hoa, click Next. Click Next lin nia va Finish de khoi

You might also like