基于CSK技术的数字签名系统设计  

Design of Digital Signature System Based on Combined Symmetric Key

作　　者：冯福伟[1,2] 李瑛[1,2] 杜丽萍[1,2] 赵桂芬[1,2] 

机构地区：[1]北京市科学技术情报研究所,北京100044 [2]网络密码认证技术北京市重点实验室,北京100044

出　　处：《网络安全技术与应用》2013年第5期30-33,共4页Network Security Technology & Application

基　　金：北京市科学技术情报研究所网络安全认证实验室建设(Ⅱ期)(PXM2011_178214_000007)资金项目资助

摘　　要：传统基于PKI密码体系的数字签名系统,框架复杂,效率低下,并存在安全缺陷。本文针对这些问题,提出了使用组合对称密钥技术构建签名系统的方案。通过组合原理实现密钥动态变化,使用对称算法和芯片内加密技术,不仅能够实现硬件级安全,而且运行速度快,并解决了密钥在生成、分发、备份和恢复等方面难以管理的问题。基于对系统运行环境的安全性、可靠性等方面考虑,系统的构建采用了Linux平台和MySQL数据库技术。The traditional digital signature system that based on PKI cryptography is complex, inefficient, and there are some security flaws. To solve these problems, a new scheme using combined symmetric key technology to build the signature system is proposed. The system uses combination principle to make the key changed each time, and uses symmetric algorithm encrypting data in chip, not only ensure hardware-level security and more fast operating, but also solve the problem that hard to keep the key＇s generation, distribution, backup and recovery. Considering the security, reliability, and other aspects, Linux platform and MySQL database technology are used to construct the system.

关 键 词：组合对称密钥 数字签名 硬件级安全 LINUX系统 MYSQL数据库 

分 类 号：TN918.1[电子电信—通信与信息系统]