基于组合对称密钥技术认证系统的设计  

Design of authentication system based on combined symmetric key

作　　者：冯福伟[1] 杜丽萍[1] 李瑛[1] 赵桂芬[1] 郭建伟[1] 

机构地区：[1]北京市科学技术情报研究所网络密码认证技术北京市重点实验室,北京100044

出　　处：《计算机工程与设计》2013年第7期2296-2300,共5页Computer Engineering and Design

基　　金：北京市科学技术情报研究所网络安全认证实验室建设(Ⅱ期)基金项目(PXM2011_178214_000007)

摘　　要：针对当前普遍以PKI/CA技术为核心的认证系统,提出了一种基于组合对称密钥技术的设计方案。方案使用组合密钥技术实现密钥一次一变,不仅能保障密钥的安全和用户身份的可靠性,而且能有效解决传统方法在密钥的生成、分发、更新、备份和恢复等方面维护困难的问题。采用Linux平台,使用MySQL数据库,开源、安全、可靠、稳定,并从多方面对系统做了性能的优化。实际运行结果表明,该系统不仅具有认证速度快、密钥管理简单、可规模化管理等特点,而且安全等级较高。Most of the current authentication systems using PKI/CA technology, a new design scheme based on combined symmetric key （CSK） technology is proposed. The system makes sure the key changed each time through the using of combination technology and, can not only guarantee the key＇s security and user＇s identity reliability, but also solve the traditional problem that hard to keep the key＇s generation, distribution, update, backup and recovery. The system runs on Linux platform, combined with MySQL database, which are open sources, safe, reliability, stability, and performance optimization works are done for the system from many aspects. Running in practice shows that the system has a fast speed, simple key management, largescale key management and much higher security level.

关 键 词：组合对称密钥 身份认证 LINUX系统 MYSQL数据库 性能优化 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]