Then a secure firewall system HTTP-oriented based on certificate authority and secure channel is designed, the system which was authenticated by CA can certify the valid user-identity and set up secure communication channel. 基于证书中心和安全通道设计与实现了一个面向HTTP协议的安全的防火墙系统,其中身份识别依赖于证书中心发放的数字证书,并具有安全通讯的安全通道。