基于国密算法的即时通信加密软件系统的设计与实现  

DESIGN AND IMPLEMENTATION OF INSTANT MESSAGING ENCRYPTION SOFTWARE SYSTEM BASED ON NATIONAL SECRET ALGORITHM

作　　者：奚宇航 黄一平 苏检德[1] 王淑沛 Xi Yuhang;Huang Yiping;Su Jiande;Wang Shupei(College of Electronic Engineering,Guangxi Normal University,Guilin 541004,Guangxi,China)

机构地区：[1]广西师范大学电子工程学院,广西桂林541004

出　　处：《计算机应用与软件》2020年第6期303-308,327,共7页Computer Applications and Software

基　　金：广西多源信息挖掘与安全重点实验室开放基金项目(MIMS14-03);2015年度广西高校科学技术研究项目(KY2015LX005)。

摘　　要：对当前移动手机客户端的即时聊天应用现状进行研究与分析,提出一种基于国密算法的即时通信加密软件系统。以iOS平台实现为例,该系统由系统服务器端和移动客户端两大部分构成。系统服务器为手机移动客户端提供调用接口并结合苹果APNs服务器进行即时消息推送操作;移动客户端包含添加好友和即时聊天等核心功能模块。该系统在即时消息加密过程中采用了国密SM2算法,以数字信封的方式实现SM4对称密钥安全分发,在系统服务器端使用SM4密钥加密后的密文进行安全传输。在移动客户端即时消息查阅的过程中使用手势、数字密码锁安全验证的方式进行信息查阅保护。该系统在即时消息的传输层和即时消息显示层都设定了安全可行的保护措施使得即时会话更加安全。应用结果表明该系统将具有较大的市场应用空间。This paper studies and analyzes the current situation of instant messaging application of mobile phone client,and proposes an instant messaging encryption software system based on national secret algorithm.Taking the implementation of iOS platform as an example,the system consists of two parts:system server and mobile client.The system server provided a call interface for the mobile phone client and combined with the Apple APNs server for instant messaging push operations;the mobile client included core function modules such as adding friends and instant chat.It adopted the SM2 national secret algorithm in the instant message encryption process,realized the SM4 symmetric key security distribution in the form of digital envelope,and used the SM4 key encrypted ciphertext for secure transmission on the system server.In the process of instant message review by the mobile client,the gesture and digital password lock were used for security verification.In the transmission layer and the display layer of instant message,we set up safe and feasible protection measures to make the instant session more secure.The application results show that the system has a large market application space.

关 键 词：即时通信 APNs 国密算法 手势数字密码 

分 类 号：TP311.52[自动化与计算机技术—计算机软件与理论]