智能卡私钥文件潜在风险分析  

Analysis of Potential Risks for Private Key File in Smart Card

作　　者：胡永涛[1] 姚静晶[1] 胡善学[2] 

机构地区：[1]公安部第三研究所信息网络安全公安部重点实验室,上海201204 [2]上海交通大学软件学院,上海200240

出　　处：《计算机工程》2011年第15期106-109,共4页Computer Engineering

基　　金：国家"863"计划基金资助项目(2008AA01Z412)

摘　　要：在病毒、木马泛滥的情况下,智能卡终端的安全性得不到保障,因此在智能卡私钥文件的生命周期中(如产生、更换、撤销过程)仍然存在安全风险,导致以私钥安全为核心的各类PKI应用出现各种问题。为此,介绍原有智能卡安全体系,对私钥在整个智能卡生命周期中的使用进行研究,并对潜在的风险进行全面分析,提出一种基于生产公钥证书的智能卡私钥保护方案。As the viruses and trojan horses are in flood, the security of smart card terminals can not always be guaranteed. Some risks may still exist in life cycle of the private key file such as generation, replacement and revocation process, resulting in various types of problems in the Public Key Infrastructure（PKI） applications based on private-key as a core. This paper elaborates the original security system of smart card, then conducts the research to the private key＇s use process in the entire smart card life cycle, caiTies on comprehensive and the thorough analysis to the latent risk, and proposes a smart card private key protection solution based on the production public key certificate.

关 键 词：智能卡 公钥基础设施 私钥 智能卡操作系统 生命周期 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]