SM系列密码算法国家标准在金融领域安全交易场景的应用  

The Application of SM Series Cryptographic Algorithm National Standard in Secure Transaction Scenarios in the Financial Field

作　　者：谷彬彬 马超 魏晓莉 

机构地区：[1]中金金融认证中心有限公司

出　　处：《信息技术与标准化》2024年第S01期31-33,99,共4页Information Technology & Standardization

摘　　要：为解决金融领域银企直连场景中上云企业无法使用传统安全硬件的问题,基于GB/T 35275—2017《信息安全技术SM2密码算法加密签名消息语法规范》等SM系列密码算法国家标准,结合密钥分散和协同签名技术,提出了无需硬件安全设备的银企直连方案,以软件的形态为交易提供真实性、机密性、完整性的保护,实现了轻量化、低成本的银企直连。In order to solve the problem in financial field that cloud-based enterprises cannot use traditional security hardware in the bank-enterprise interconnection scenario,this paper proposes a bank-enterprise interconnection scheme without hardware security devices based on the SM series cryptographic algorithm national standards such as GB/T 35275—2017"Information security technology-SM2 cryptographic algorithm encrypted signature message syntax specification",combined with key distribution and collaborative signature technology.It provides authenticity,confidentiality and integrity protection for transactions in the form of software,achieving lightweight and low-cost bankenterprise interconnection.

关 键 词：网络安全 标准应用 密钥分散 协同签名 金融安全交易 银企直连 

分 类 号：F203[经济管理—国民经济] F832[自动化与计算机技术—计算机系统结构] TP309.7[自动化与计算机技术—计算机科学与技术]