基于CPK的电子签章在移动端的设计与实现

发布时间：2019-01-07 12:00

【摘要】：随着电子商务与电子政务的快速发展,电子文档的安全问题也引起人们越来越多的关注。电子签章技术应运而生,通过数字签名与签章图像相结合的方式来确保电子文档的完整性和签章者的不可否认性。目前,电子签章系统仍以桌面软件为主,使用时受到办公地点和专用网络的限制较大,导致处理业务的效率不高。因此,本文设计了一种基于CPK的移动端电子签章系统,以满足移动安全办公的需求。首先,本文对现有电子签章系统进行了分析与研究,总结出了目前系统中存在的不足和缺陷。目前主流电子签章系统采用以权威认证机构CA为核心的PKI技术,其具有建设维护成本高、用户规模扩大后运行效率降低等问题。本文采用了 CPK组合公钥技术设计电子签章系统,利用CPK TF卡进行芯片级的数字签名与认证,不需要CA和在线数据库的参与,极大地提高了运行效率,降低了成本。本文在深入研究了 CPK技术在电子签章系统中的实现原理和其他相关技术的基础上,设计并实现了移动端的电子签章系统。该系统的用户平台由电子签章客户端和嵌入式终端组成,其中电子签章客户端负责文档处理、签章图像制作、盖章等操作交互,嵌入式终端连接电子签章客户端,完成与CPK相关的签名、加密、存储等功能,二者之间通过蓝牙模块进行数据传输。在进行电子文档的安全传输时,设计了数字摘要、数字签名和数字信封相结合方式的数字签名算法,使得电子文档只能被特定的的接收者查看,提高了文档的安全性能。本课题通过详细的规划设计,初步实现了基于CPK的移动端电子签章系统,实现了课题的预期要求,并在论文的最后提出了完善及改进方案。
[Abstract]:With the rapid development of e-commerce and e-government, people pay more and more attention to the security of electronic documents. Electronic signature technology emerges as the times require. Digital signature and signature image are combined to ensure the integrity of electronic document and the non-repudiation of signer. At present, the electronic signature system is still mainly desktop software, which is limited by the office location and the special network, which leads to the low efficiency of processing business. Therefore, a mobile electronic signature system based on CPK is designed to meet the needs of mobile secure office. First of all, this paper analyzes and studies the existing electronic signature system, summarizes the shortcomings and defects of the current system. At present, the mainstream electronic signature system adopts the PKI technology with the authority certification organization CA as the core, which has the problems of high cost of construction and maintenance, reduced operation efficiency after the expansion of the user scale, and so on. In this paper, the CPK combination public key technology is used to design the electronic signature system, and the CPK TF card is used for the digital signature and authentication at the chip level, without the participation of CA and online database, which greatly improves the running efficiency and reduces the cost. On the basis of deeply studying the realization principle of CPK technology in electronic signature system and other related technologies, this paper designs and implements the electronic signature system of mobile terminal. The user platform of the system is composed of electronic signature client and embedded terminal. The electronic signature client is responsible for document processing, signature image making, seal sealing and so on. The embedded terminal connects the electronic signature client. Complete the CPK related signature, encryption, storage and other functions, between the two through Bluetooth module for data transmission. A digital signature algorithm combining digital digest, digital signature and digital envelope is designed for the secure transmission of electronic document, which makes the electronic document only be viewed by a specific receiver, and the security performance of the document is improved. Through the detailed planning and design, the paper realizes the mobile electronic signature system based on CPK, realizes the expected requirements of the subject, and puts forward the perfect and improved scheme at the end of the paper.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP309

【相似文献】