基于主从式架构的数字签名系统设计研究  

Digital Signature System Based on the Master-Slave Architecture

作　　者：冯福伟[1,2] 杜丽萍[1,2] 李瑛[1,2] 赵桂芬[1,2] 

机构地区：[1]北京市科学技术情报研究所,北京100044 [2]网络密码认证技术北京市重点实验室,北京100044

出　　处：《计算机与数字工程》2013年第10期1645-1649,共5页Computer & Digital Engineering

基　　金：北京市科学技术情报研究所网络规模化认证服务中心建设项目(编号:PXM2012_178214_000005)资助

摘　　要：论文介绍了数字签名技术的基本原理,列举了当前常用的数字签名方法,并指出它们所存在的问题。针对这些不足,提出了基于组合对称密钥技术的数字签名方案。通过采用组合原理动态生成密钥,采用对称算法加密数据,并基于硬件一级操作,使系统具有安全性高、速度快、密钥管理简单的特点。针对实际应用环境中终端用户数量多,服务器数据吞吐量大,要求服务器响应及时、安全可靠、易于维护和扩展等,给出了负载均衡主从式架构搭建签名验证服务器系统的方案。The basic principle of digital signature technology is introduced, the digital signature methods that regularly used are listed, and the problems that existed in them are pointed out too. To solve these deficiencies, a new digital signature scheme based on combination of symmetric key （CSK） is proposed. The CSK uses combined technology to generate key dynamically, uses symmetric algorithm to encrypt data, and operations are done in chip, all of these make it more safe, fast, and simple key management. Considering that the large number of terminal equipments, the high throughput of server, and requires that server should respond timely, security, reliability, easing to main- tain and extend, a scheme is proposed that uses master-slave architecture with load balancing to build the signature verify server system.

关 键 词：数字签名 组合对称密钥 大规模终端 负载均衡 主从式架构 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]