基于PKCS#11的多应用并发设计  

Design on Multi-application Concurrence Based on PKCS#11

作　　者：王小映[1] 武小年[1] 闵波[1] 

机构地区：[1]桂林电子科技大学信息与通信学院,广西桂林541004

出　　处：《计算机与网络》2017年第15期73-75,共3页Computer & Network

摘　　要：美国RSA数据安全公司发布的一个工业标准公钥密码学接口,称为PKCS,其中PKCS#11是一个加密设备接口标准,是PKCS一系列标准中的一个,Cryptoki是PKCS#11详细规定的一个编程接口,各种可移植的安全设备都可以适用。PKCS#11标准仅支持单进程访问,无多进程并发应用处理的功能,无法满足多个应用同时使用加密服务的要求。基于PKCS#11的多进程并发设计,提出支持多应用同时使用加密服务,通过系统的权限设置、应用独占与取消及优先级考虑及队列管理等一系列措施来实现基于PKCS#11的多进程并发应用功能。PKCS is an industrial standard public cryptographic key interface released by USA R.SA Data Security Company. PKCS# 11 is one of PKCS Eunily, and Cryptoki is a programnfing interfitce specified detailedly by PKCS#11, which is suitable for various transportable security equipment. PKCS #1 1 standard only supports single-process access, and has no fimction of multi-process concurrent application processing, so it can＇t satisfy the requirements of multiple applications using cryptography service at the same time. In the multi-process concurrence design based on PKCS#11, this paper puts forward a method of supporting multiple application using cryptography service concurrently. The application function of nmlti-process concurrence based on PKCS#11 is realized by a series of means such as system authority setting, application monopolization and cancellation, priority consideration and queue management.

关 键 词：互联网安全 PKCS#11 多进程并发 加密服务 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]