基于IBE Service的新型文件加密系统  

File Encryption System Using IBE Service

作　　者：施健[1] 陈铁明[1] 茆俊康[1] 

机构地区：[1]浙江工业大学计算机科学与技术学院,杭州310023

出　　处：《计算机系统应用》2012年第6期16-19,共4页Computer Systems & Applications

基　　金：浙江省科技计划项目(2010C31126;2011C21046);2010年度浙江省大学生科技创新活动计划项目

摘　　要：基于身份的公钥加密(Identity-based Encryption,简称IBE)体制采用用户ID作为公钥,无需公钥证书操作,较传统的PKI体系具有开发部署简单、应用成本低等优势,尤其适用于密钥集中式管理的企业级应用。设计了一个基于Web Service的IBE密钥管理服务系统IBE Service,实现各个网络安全域内的用户密钥管理,提供以用户安全策略为中心的密钥服务;基于IBE Service开发了一个面向通用文件加密的客户端应用,主要通过SOAP服务接口实现基于XML的IBE密钥数据交互。新型的文件加密系统可将接收方ID直接映射为公钥,接收方自动向IBE Service获取私钥完成文件解密,具有安全、便捷等优点,且支持灵活的ID安全策略管理。Identity-based public key encryption （short for IBE） system can directly take user＇s ID as her public key, without need of public key certificate. Comparing to the traditional PKI, [BE is easy to develop and deploy with lower cost. It is specially suited for the enterprises with centralized key management supported. In this paper, a web servicebased [BE key management service system, IBE Service, is firstly proposed, which facilitates users of different security domains to manage [BE keys and provides a user secure policy-centered key service. Based on [BE service, a general file encryption client application is then developed. It utilizes SOAP protocol to implement XML-based IBE key data communications. The proposed new file encryption system can map the receiver＇s ID as her public key, and the receiver can automatically do decryption by aehieving her private key from [BE service. It is more secure, efficient, as well as with flexible ID secure policy supported.

关 键 词：文件加密 IBE Web SERVICE SOAP XML 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]