高安全等级密码模块安全技术设计  

Security Design of High-safety-level Cryptographic Modules

作　　者：周健 秦放 ZHOU Jian;QIN Fang(Chengdu 30 JAVEE electronics Co.,Ltd.,Chengdu Sichuan 610041,China)

机构地区：[1]成都三零嘉微电子有限公司,四川成都610041

出　　处：《通信技术》2022年第2期247-253,共7页Communications Technology

摘　　要：随着金融、大数据等行业的普及和发展,对密码设备的依赖与日俱增,并且业内在数据安全领域提出了多方面更高的要求,例如密码模块的物理安全、抗非入侵式攻击、抗环境失效等,迫切需要更高安全等级的密码模块来支撑行业的实际应用需求。依托安全二级密码模块,提出了新的高安全等级密码模块,在既有功能和安全技术设计的基础上,新增了物理安全、实体鉴别、环境失效性检测、非入侵式攻击缓解4个重要的安全技术。该模块设计对数据安全要求极高的行业和领域具有重要的实用意义。With the popularization and development of finance and big data,there are increasing reliance on cryptographic device,and they make higher requirements in many aspects of data security,such as physical security,anti-non-invasive attacks,anti-environmental failure,etc,therefore the cryptographic modules with higher security level are urgently needed to support the practical application needs.Based on security-Lv2 cryptographic module,a high-safety-level cryptographic module’s functions and design is proposed.This module adds new features including physical security,entity authentication,environmental failure testing,mitigation of non-invasive attacks.It has important practical significance for industries and fields with high requirements of data security.

关 键 词：高安全等级 密码模块 实体鉴别 非入侵式攻击缓解技术 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]