基于分层设计思路实现易扩展的PKCS#11库  

Realization of Easily-extensible PKCS#11 Library based on Hierarchical Design Idea

作　　者：房利国[1] 王银[1] 余海[1] 

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《信息安全与通信保密》2012年第8期84-85,89,共3页Information Security and Communications Privacy

摘　　要：随着信息化和信息安全技术的迅猛发展,PKCS#11标准的应用越来越广泛。因此,有必要对PKCS#11库的可扩展性进行研究。简要介绍了PKCS#11标准,分析了Cryptoki的通用模型和逻辑结构,同时,分析了实现PKCS#11库时,不进行分层设计的缺陷,并针对不分层设计的缺陷,提出了一种基于分层设计思路实现易扩展的PKCS#11库的方法,指出了设计和实现过程中应注意的事项。采用分层设计方式实现的PKCS#11库在实践中被证明具有良好的可扩展性。With the rapid development of informationization and information security technology, PKCS#11 standard is increasingly applied. Therefore, it is necessary to research the extensibility of PKCS#11 library. This paper gives a brief introduction of PKCS#11 standard, analyzes the general model and logical structure of Cryptoki, and discusses the defects of non-hierarchical design in the implementation of PKCS#11 library. Aiming at the defects of non- hierarchical design, a method for realizing the easily-extensible PKCS#11 library based on hierarchical design idea is proposed, and the noticeable notable things in the design and implementation are also pointed out. Experiment indicates that this PKCS#11 library implemented in hierarchical design mode is of excellent extensibility.

关 键 词：PKCS#11 Cryptoki API 二次开发 分层设计 可扩展性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]