政务信息系统商用密码集约化平台设计与实现  

Design and Implementation of Cryptography Intensive Platform for Government Information System

作　　者：白荣华 魏强 郭瑞 刘金 Bai Ronghua;Wei Qiang;Guo Rui;Liu Jin(Information Center of Xinjiang Uygur Autonomous Region,Urumqi 830001;Shenzhen OLYM Information Security Technology Co.Ltd.,Shenzhen,Guangdong 518000)

机构地区：[1]新疆维吾尔自治区信息中心,乌鲁木齐830001 [2]深圳奥联信息安全技术有限公司,广东深圳518000

出　　处：《信息安全研究》2023年第5期461-468,共8页Journal of Information Security Research

基　　金：新疆网信科创课题研究项目(12123601)。

摘　　要：针对电子政务领域密码应用不便捷、不规范、不通用、资源浪费的问题,提出一种体系化、集约化、规范化的技术方案.该方案组合国密SM2,SM3,SM4,SM9算法,形成了集约化的体系框架.将密码基础设施池化,减少信息系统应用密码的负担,提供密码应用统一接口,实现合规、有效、便捷的密码应用.电子政务外网商用密码集约化平台建设试点应用实践表明,该方案可提高密码资源利用率,节省投资,对规模级政务信息系统商用密码应用安全保护具有参考价值.Aiming at the problems of inconvenient,nonstandard,non universal and waste of resources for cipher application in the field of e-government,this paper puts forward a systematic,intensive and standardized technical scheme.The scheme combines the SM2,SM3,SM4 and SM9 algorithms to form an intensive system framework,pool the cryptographic facilities,reduce the burden of applying cipher in the information system,provide a unified interface for cryptographic applications,and realize compliant,effective and convenient cryptographic applications.The pilot application practice of cryptographyintensive platform construction of e-government extranet shows that this scheme can improve the utilization rate of cipher resources and save investment,and has reference value for the security protection of cipher application of scale government information system.

关 键 词：商用密码 集约化 政务信息化 标识密码 电子政务 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]