分布式环境下文件内容防篡改系统研究  

Research on File content Tamper-proofing System for Distribution Environment

作　　者：刘彤[1] 蒋继娅[1] 胡祥义[1] 

机构地区：[1]北京市科学技术情报研究所,北京100044

出　　处：《计算机安全》2007年第11期1-4,共4页Network & Computer Security

摘　　要：如何有效地保护分布式环境下存储信息的安全性,已经成为很多Web应用急需解决的问题。该文提出的文件内容防篡改系统,可有效抵抗分布式环境下的文件内容非法篡改,防止非法信息的泄漏和传播。为了满足Web系统对校验速度的要求,该文采用文件长度验证与HMAC相结合的快速校验算法,在保证系统安全性的前提下,提高了系统的处理速度。最后,给出了系统的实施方案及实际应用案例。　It is very important to protect the data security in distributed web applications. In this paper, a file content tamper-proofing system is proposed, which can effectively resist file content tampering, and prevent illegal information spreading. To meet the requirement of authentication speed, a fast authentication algorithm combines file length verification and HMAC is used in the file content tamper-proofing system, which improves the computing speed while keeping the system’s security. Then the implementation plan of the file content tamper-proofing system is proposed.

关 键 词：分布式环境 防篡改 内容校验 HMAC 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]