基于CAPICOM的信息安全传输系统的设计与实现  

Design and Implementation of Information Secure Transmission System Based on CAPICOM

作　　者：史建宜 陈新鹏 周献飞[3] 徐楷 靳金朔 SHI Jianyi;CHEN Xinpeng;ZHOU Xianfei;XU Kai;JIN Jinshuo(Power Dispatching and Control Center,State Grid Beijing Fangshan Power Supply Company,Beijing 102488,China;Information Communication Dispatching and Control Center State Grid Information&Telecommunication Brach,Beijing 100053,China;Power Dispatching and Control Center,State Grid Beijing Electric Power Company,Beijing 100053,China)

机构地区：[1]国网北京房山供电公司电力调度控制中心,北京102488 [2]国家电网公司信息通信分公司信息通信调度控制中心,北京100053 [3]国网北京电力公司电力调度控制中心,北京100053

出　　处：《电工技术》2019年第20期156-158,161,共4页Electric Engineering

摘　　要：文章简述了保证网络数据安全传输的常用技术手段数字签名及数字信封,并详述高性能加密应用程序接口组件CAPICOM及其使用方法,研究了使用IAIK来直接解析和验证PKCS#7格式的数字签名和数字信封的方法。通过引入EJBCA来解决客户端无法获得服务端证书信息的问题。在此基础之上,设计并实现一个信息安全传输系统,可以有效地保证信息传输的安全性和完整性。This paper describes some techniques which can ensure the secure transmission of network data,details the high-performance encryption application interface component CAPICOM and its usage,and researches the method that uses IAIK to directly parse and verify the digital signature and digital envelope of PKCS#7 format.The problem that the client cannot get the server certificate information is solved by introducing EJBCA.On this basis,designing and implementing an information security transmission system can effectively guarantee the security and integrity of information transmission.

关 键 词：CAPICOM 数字签名 数字信封 EJBCA IAIK PKCS#7 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]