公共数据库中可信记录的认证码的研究  

Study on the Authentication Codes of Reliable Records in a Public Database

作　　者：麦瑞玲[1] 游荣彦[1] 

机构地区：[1]华南师范大学计算机科学系,广东广州510631

出　　处：《计算机应用研究》2003年第10期98-100,104,共4页Application Research of Computers

摘　　要：在用户享有授权可自由添加记录的公共数据库中,数据良莠难分。为提高公共数据库的可信度,推广了敏感数据的完整性锁的概念,提出了一种对经由领域专家验证的可靠记录作标记的方法,且称所作标记为认证码。讨论了认证码的生成准则,并借助于MD5算法、DES密码算法中的S盒和RSA密码体制,设计了一个认证码的生成方案,最后还指出所生成的认证码能有效地抵抗伪造攻击和替代攻击。The good data and the not very good data are intermingled in a public database which all the users have the authorization to append records freely to. For the purpose of raising the trustiness of a public database, this paper generalizes the concept of the integrity locks of sensitive data, presents a method to indicate the reliable records which were checked by the field experts and names the indicators authentication codes.Furthermore, the paper discusses the generating criteria of the authentication codes, designes a scheme for generating the authentication codes by using the MD5 algorithm ,the Sboxes of the DES encryption algorithm and the RSA encryption system and finally points out that the generated authentication codes can effectively protest against the fabrication attack and the substitution attack.

关 键 词：校验和 数据库安全 MD5算法 S盒 RSA密码体制 攻击 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]