基于国密算法的PKI/CA系统升级  

PKI/CA System Upgrade Based on National Secret Algorithm

作　　者：甘颖 GAN Ying(China Helicopter Research and Development Institute,Jingdezhen Jiangxi 333001)

机构地区：[1]中国直升机设计研究所,江西景德镇333001

出　　处：《中国科技纵横》2023年第20期57-59,81,共4页China Science & Technology Overview

摘　　要：分析某单位现有的PKI/CA系统运行情况,针对其存在的问题以及新业务要求,提出一种支持SM2国密算法的PKI/CA系统,可以在不影响业务使用的情况下,实现对基于RSA1024算法的PKI/CA系统进行兼容性平滑升级的目标。描述支持SM2算法的PKI/CA系统的新特性,新PKI/CA系统将全面支持SM2国密证书,从而提升系统安全防护强度;通过PKI/CA系统的升级,实现了应用安全防护体系密码算法国产化,系统符合相关政策法规要求,提升了单位信息网络的安全防护能力。Analyze the operation of the existing PKI/CA system of a certain company,in view of its existing problems and the requirements of new services,a PKI/CA system supporting SM2 national secret algorithm is proposed,which can achieve the goal of smoothly upgrading the compatibility of PKI/CA system based on RSA1024 algorithm without aff ecting business use.The new features of the SM2 algorithm are described,and the new PKI/CA system will fully support the SM2 secret certificate,thereby improving the strength of system security protrction;Through the upgrade of the PKI/CA system,the localization of the application security protection system cayptographic algorithm is realized,and the system meets the relevant policies and regulations,and the security protection capability of the company information network is improved.

关 键 词：PKI/CA系统 SM2算法 网络安全防护 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]