一种基于国密算法的统一开放授权认证平台的设计与实现  

Design and Implementation of a Unified Open Authorization and Authentication Platform Based on National Cryptographic Algorithms

作　　者：梁丹池 韦筱泉 唐丽[1] LIANG Danchi;WEI Xiaoquan;TANG Li(Guangxi Radio and Television Technology Center,Nanning Guangxi 530022)

机构地区：[1]广西广播电视技术中心,广西南宁530022

出　　处：《软件》2025年第2期61-64,共4页Software

摘　　要：为响应国家《中华人民共和国密码法》及等级保护标准2.0的要求,重要的信息基础设施应当使用商用密码加以防护。本文通过在OAuth2.0和OIDC的开放授权认证标准协议中采用SM2、SM3和SM4等国密算法,对认证和授权过程中的数据进行加密与签名,构建符合国家标准的国密SSL加密通道,研究和实现了统一开放授权认证平台,确保了多业务系统用户认证和授权过程中的数据安全性和合规性。To comply with the requirements of the"Cryptography Law of the People's Republic of China"and the"Information Security Technology–Baseline for Classified Protection of Cybersecurity,"critical information infrastructure must be protected using commercial cryptography.This article implements the SM2,SM3,and SM4 cryptographic algorithms in the OAuth 2.0 and OIDC open authorization and authentication protocols to encrypt and sign data during the authentication and authorization processes.By constructing an SSL encryption channel with domestic cryptographic algorithms,this article develops and implements a unified open authorization and authentication platform,ensuring the security and compliance of user authentication and authorization data across multiple business systems.

关 键 词：国密算法 国密SSL/TLS OAuth2.0 OIDC 身份认证 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]