基于PKI技术的二维码安全性研究

发布时间：2018-01-07 11:13

本文关键词：基于PKI技术的二维码安全性研究　出处：《安徽理工大学》2017年硕士论文　论文类型：学位论文

【摘要】：随着移动互联网的快速发展以及智能终端设备的大范围推广,电子标签技术已经逐渐在各行各业中广泛运用。二维码作为一种信息的载体,同时也是信息搜集、数据存储的重要方法和手段,已经在物流管理、工业自动化和电子商务等领域得到了广泛的应用,然而随之也产生了一系列信息安全问题,特别是在电子商务领域,如何防范二维码信息被伪造或被篡改等问题,这已经关系到每个使用者的切身利益。二维码的安全性问题已成为世界领域专家学者研究的热点课题之一。本文详细分析了二维码产生发展历程、应用领域以及面临的安全性问题。研究了二维码编解码算法以及数字信息加解密算法。重点研究了 QR码的编码和解码以及非对称公钥体系中的RSA算法。在此研究的基础上提出了一种基于PKI技术的解决二维码安全性问题的算法,该算法采用私钥对二维码信息加密,采用公钥进行解密,改变了传统的PKI技术中公钥加密私钥解密的思想。该算法较好的解决了二维码信息防篡改以及真伪鉴别等安全性问题。本文采用C#编程语言,设计实现了基于RSA的二维码加解密应用系统。该系统平台包括公私钥生成模块、加解密密钥管理模块、二维码设计与生成模块以及二维码识别和解密模块。完成了 PKI公钥体系中的CA认证中心、服务提供商和用户三种角色的功能。本算法的密钥管理模块中私钥负责加密,而公钥则负责解密。密钥管理方案采用封闭式,这样既解决了二维码数据传输的安全性问题,又具有了身份认证的功能,较好的解决了二维码数据真伪鉴别问题。这种加解密模式更符合OTO电子商务模式的认证识别。
[Abstract]:With the rapid development of mobile Internet and the wide spread of intelligent terminal devices, tag technology has been widely used in various industries. As a carrier of information, QR code is also a collection of information. The important methods and means of data storage have been widely used in the fields of logistics management, industrial automation and electronic commerce. However, a series of information security problems have emerged. Especially in the field of electronic commerce, how to prevent the information of QR code from being forged or tampered with. The security of QR codes has become one of the hot topics of experts and scholars in the world. In this paper, the development of QR codes is analyzed in detail. The application field and security problems are discussed. The encoding and decoding algorithm of two-dimensional code and the encryption and decryption algorithm of digital information are studied. The encoding and decoding of QR code and the RSA algorithm in asymmetric public key system. Based on this research, an algorithm to solve the security problem of QR code based on PKI technology is proposed. The algorithm uses the private key to encrypt the information of the two-dimensional code and decrypts the information with the public key. The idea of public key encryption and private key decryption in traditional PKI technology is changed. The algorithm solves the security problems such as anti-tampering and authenticity authentication of two-dimensional code information. C # programming language is used in this paper. The design and implementation of a two-dimensional code encryption and decryption application system based on RSA. The system platform includes public and private key generation module, encryption and decryption key management module. The design and generation module of two-dimensional code and the identification and decryption module of two-dimension code. The CA authentication center in PKI public key system is completed. In the key management module of this algorithm, the private key is encryption, and the public key is responsible for decryption. The key management scheme is closed. This not only solves the security problem of the data transmission of QR code, but also has the function of identity authentication. This encryption and decryption mode is more suitable for authentication and identification of OTO e-commerce mode.
【学位授予单位】：安徽理工大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP391.44;TP309

【参考文献】