一种对称密钥的密钥管理方法及系统  

A Key Management Method and System of Symmetric Key

作　　者：苏威积 汤敬浩 李剑 

机构地区：[1]北京航天爱威电子技术有限公司,北京100854 [2]北京邮电大学计算机学院,北京100876

出　　处：《信息安全研究》2018年第1期80-83,共4页Journal of Information Security Research

基　　金：国家自然科学基金项目(U1636106;61472048)

摘　　要：密码技术是信息安全问题的核心技术之一,密钥管理技术是密码技术的基础,其在密钥的产生、存储、分配、更新、吊销、控制、销毁等密钥全生命周期过程中保证密钥的安全.而在安防视频监控系统中,每路视频的传输也需要采用对称密钥加密.但传统的对称密钥管理方法是基于共同保存对称密钥实现的,同时要保证彼此密钥的交换是安全可靠的,同时还要设定防止密钥泄密和更改密钥的程序.这样,对称密钥的管理和分发工作将变成一件潜在危险的和繁琐的过程.所以提供一种对称密钥管理方法及TCP服务端系统,所有的对称密钥均加密存储在服务器.用户可以向服务器发送密钥请求,能方便地访问服务器并拿到密钥,并且用户和服务器的通信均通过公钥体系认证并加密,这使得密钥管理既高效合理,又安全可靠.Cryptography is one of the core technology of information security, meanwhile, key management technology is the foundation of cryptography, key management typically consists of these steps: generation, storage, exchange, update, revocation, control and destroy. In our video surveillance system, the video transmission of each channel also need encryption using symmetric key. However, the traditional key management method is based on the fact that both entities hold the symmetric key jointly. It will be tedious and dangerous potentially in order to ensure exchange of keys is safe and reliable and to prevent password leakage. To solve the problem, a symmetric key management method and a TCP server system is provided. In our system, all symmetric keys are stored in the server. Users can send requests to the server for getting the valid key,Meanwhile, the connection of users and server is certified and encrypted, making the key management efficient, reasonable, and safe.

关 键 词：对称密钥 密钥管理 非对称密钥 公钥体系 CA认证 

分 类 号：TP302.1[自动化与计算机技术—计算机系统结构]