移动电子政务证书认证系统设计与实现

发布时间：2018-04-25 15:54

本文选题：移动电子政务 + RSA算法　；参考：《西安电子科技大学》2014年硕士论文

【摘要】：移动电子政务是移动政务无线通讯及移动计算技术在政府工作中的应用,通过诸如智能手机、平板电脑、Wifi终端、蓝牙设备、无线网络等技术为公众提供服务。移动电子政务技术可以不受“线”与“在场”的束缚,减少政府工作人员的工作量,提高工作效率和绩效,更好地为公众提供便利的服务。然而,移动电子政务技术却面临着身份鉴别和信息安全两大障碍。为了保障政府内网信息资源以及移动终端的绝对安全,移动电子政务需要比有线电子政务更高要求的终端加固、信道加密、身份认证、访问控制等安全管理措施。本论文在移动电子政务应用平台的基础上,为移动电子政务的使用人员构建一个证书认证系统,通过建立全面、有效的安全机制和措施来保证接入终端的安全、内网的安全。该系统能够提供身份认证、证书加密、安全通信等功能,为智能移动终端用户提供一个安全的、可信任的移动办公环境,从而解决电子政务在无线网络环境下的安全问题。论文首先研究非对称密码算法中RSA算法、ECC算法以及SM2算法的理论知识,通过分析比较得出SM2算法优于RSA算法的结论;然后引入移动发证技术实现通过移动智能终端与证书认证系统安全对接进行证书管理等操作,并对接口协议进行设计;最后通过分别对KM系统、CA系统以及RA系统结构的设计和密钥服务的设计,实现了适合当前移动电子政务的证书认证系统,并对其工作流程、工作原理以及关键技术等设计情况进行阐述。基于RSA算法的普及率以及SM2算法的替代价值等方面考虑,本论文设计并实现的证书认证系统能够同时支持RSA、SM2两种算法。随着国家密码算法的升级,新的算法可以为证书认证系统提供更高的加密速度和更宽的加密带宽,同时,论文设计并实现的证书认证系统又能服务和兼容基于旧算法的移动电子政务安全平台,方便安全集成管理,提高了系统的安全保障系数。从整个行业的角度,通过推广应用SM2算法的移动电子政务证书认证系统可以带动SM2算法芯片、SM2密码机、SM2密码Key、SM2密码应用等整个行业。除了应用于传统的密码领域,它还可以应用在WPKI,数字电视,数字版权保护,电子病历、电子护照等多个新兴的市场潜力巨大的行业,更会带动读写机具,证据存储等更多相关业务的市场发展。
[Abstract]:Mobile e-government is the application of mobile government wireless communication and mobile computing technology in government work. It provides services to the public through such technologies as smart phone, tablet computer WiFi terminal, Bluetooth device, wireless network and so on. Mobile e-government technology can not be restricted by "line" and "presence", reduce the workload of government staff, improve work efficiency and performance, and better provide convenient services for the public. However, mobile e-government technology is facing two major obstacles: identity authentication and information security. In order to ensure the absolute security of information resources and mobile terminals, mobile e-government needs more security management measures than cable e-government, such as terminal reinforcement, channel encryption, identity authentication, access control and so on. On the basis of the mobile e-government application platform, this paper constructs a certificate authentication system for the users of mobile e-government, and establishes a comprehensive and effective security mechanism and measures to ensure the security of the access terminal and the intranet. The system can provide identity authentication, certificate encryption, secure communication and so on. It can provide a secure and trusted mobile office environment for intelligent mobile terminal users, so as to solve the security problems of e-government in wireless network environment. Firstly, this paper studies the theoretical knowledge of RSA algorithm and SM2 algorithm in asymmetric cryptographic algorithm, and draws the conclusion that SM2 algorithm is superior to RSA algorithm through analysis and comparison. Then the mobile license issuing technology is introduced to realize the operation of certificate management through the secure docking between mobile intelligent terminal and certificate authentication system, and the interface protocol is designed. Finally, through the design of km system, CA system, RA system structure and key service, the certificate authentication system suitable for current mobile e-government is realized, and its workflow is discussed. The working principle and key technology are described. Based on the popularity of RSA algorithm and the substitution value of SM2 algorithm, the certificate authentication system designed and implemented in this paper can support two algorithms RSA-SM2 at the same time. With the upgrading of the national cryptographic algorithm, the new algorithm can provide higher encryption speed and wider encryption bandwidth for the certificate authentication system, at the same time, The certificate authentication system designed and implemented in this paper can also serve and be compatible with the mobile e-government security platform based on the old algorithm, which is convenient for integrated security management and improves the security guarantee coefficient of the system. From the point of view of the whole industry, by popularizing the mobile e-government certificate authentication system using SM2 algorithm, we can drive the SM2 algorithm chip, SM2 cryptographic machine, SM2 cryptosystem, SM2 cryptographic application and so on. In addition to traditional cryptography, it can also be used in WPKI, digital television, digital rights protection, electronic medical records, electronic passports, and many other emerging industries with huge market potential, and will also drive reading and writing machines. Evidence storage and other related business market development.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.4

【相似文献】