基于加密卡的JCA的研究与实现  

ON CRYPTOGRAPHIC CARD-BASED JCA AND ITS IMPLEMENTATION

作　　者：汪永好[1] 

机构地区：[1]北京电子科技学院计算机科学与技术系,北京100070

出　　处：《计算机应用与软件》2008年第10期271-272,278,共3页Computer Applications and Software

摘　　要：JCA是一个为Java程序提供密码安全服务的框架,且具有实现独立性和算法独立性的特点。依据这一特点,提出了基于加密卡且完全遵照JCA标准接口来实现一个CSP的设想,以便于对Java程序中的关键数据实现硬件保护。并通过对实现该CSP的三种可能方案的比较,认为最好能基于Microsoft CryptoAPI来实现该CSP,并具体讨论了实现该CSP的步骤及其关键技术问题。JCA （Java Cryptographic Architecture） is a framework providing the eryptographic services to java applications, and has two main design principles in independence of implementation and algorithm. So, a scheme is provided in compliance with the standard JCA application program interfaee （API） to implement CSP （ Cryptographic Service Provider） based on cryptographic card, which will help to achieve the hardware-based protection of the important data of java applications. By the comparison of three possible schemes of implementing the CSP, the author considers that the CSP would be better to be implemented on the basis of Microsoft CryptoAPI, and suggests the concrete steps and key technologies related to the implementation of the CSP.

关 键 词：JAVA安全 加密卡 JCA CSP MICROSOFT CRYPTOAPI 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP309.7[自动化与计算机技术—计算机科学与技术]