Firstly, a layered design idea of public key certificate management system is put forward based on the understanding of PKIX, in order to realize the independence of cipher algorithms.

• 本文首先基于对PKIX的理解认识,并考虑到把密码算法做成独立的模块,提出了分层的设计思想。把公钥证书管理系统从上到下分为三个层次:业务管理层、安全接口层和密码服务层。