SM9用户私钥在线分发技术  

SM9 User Private Key Online Distribution Technology

作　　者：曾勇 马睿 彭丰伟 刘方舟 陈福莉[1] 蔡罗成[1] ZENG Yong;MA Rui;PENG Fengwei;LIU Fangzhou;CHEN Fuli;CAI Luocheng(Chengdu Westone Information Industry Technology Co.,Ltd.,Chengdu Sichuan 610041,China;University of Electronic Science and Technology of China,Chengdu Sichuan 611731,China;Unit 61428 of PLA,Beijing 100072,China)

机构地区：[1]成都卫士通信息产业股份有限公司,四川成都610041 [2]电子科技大学,四川成都611731 [3]中国人民解放军61428部队,北京100072

出　　处：《通信技术》2022年第8期1050-1057,共8页Communications Technology

摘　　要：SM9密码算法属于基于标识的密码(Identity Based Crytograph,IBC)体系,它利用用户终端的标识替代或将其演化为公钥,无须公钥证书授权(Certificate Authority,CA),降低了密钥资源管理和部署难度,适用于有较高安全需求的物联网应用场景。但用户私钥分发需将用户终端集中于密钥管理系统并以离线方式写入用户终端的密码载体,不能通过网络在线方式写入,因此存在工作量大、管理效率低的不足。基于SM9密钥管理技术体制,通过相关安全性设计,提出了一种用户私钥在线分发方法,可有效推进SM9在物联网领域的应用。SM9 cipher algorithm belongs to IBC(Identity Based Cryptosystem). It uses the user terminal identification to replace or evolve it into a public key, without public key certificate authorization, which reduces the difficulty of key resource management and deployment, and is suitable for IoT application scenarios with high security requirements. However, user private key distribution needs to centralize the user terminal in the key management system, and write it into the password carrier of the user terminal in an offline manner, and cannot be written online through the network, so there are disadvantages of large workload and low management efficiency. Based on SM9 key management technology system, though relevant security design, an online distribution method of user private key is proposed, which can effectively promote the application of SM9 in IoT.

关 键 词：基于标识的密码系统 SM9密钥管理系统 用户私钥 用户注册 私钥分发 

分 类 号：TN918.8[电子电信—通信与信息系统]