基于一次性数字证书的电子签名系统研究与实现

发布时间：2018-06-19 00:39

本文选题：电子签名 + 一次性签名　；参考：《西南科技大学》2017年硕士论文

【摘要】：移动办公领域凭借各种智能终端的技术成熟高速发展,而经过多年发展已经日趋完善的电子签名系统并不能完全适应目前的移动办公环境,无法为移动端的签名者提供符合电子签名法要求的安全数字签名。第三方数字证书机构通过推出各种新式的证书载体,比如蓝牙Key、MicroSD卡Key、OTG接口的Key等,为数字证书在移动端的使用提供了条件,解决了部分固定签名者签名环境下的证书使用问题。然而,在医疗知情文书签署、保险单签署、通信业务单签署等移动展业环境下应用电子签名时,业务参与者具有高度随机性,服务提供者由于通过第三方证书机构颁发的数字证书单价高、制作周期长等因素,无法为参与业务的客户提供有效的数字证书,导致电子签名系统在相关环境下的应用不规范,存在较大的安全和法律风险。本文提出并实现了一种基于一次性数字证书的电子签名算法,通过向数字证书中添加签名文档信息、签名活动信息、笔迹信息,经过相关的密码学方法处理后生成一次性数字证书,使用该证书执行传统的数字签名,解决随机签名者的数字证书问题。同时,本文设计了针对一次性数字签名的验证算法,通过该算法以及解析已签名文档的相关信息,可以认证签名文档的完整性、签名者笔迹是否被修改、签名者身份等与签名活动相关的多项信息。通过本文的一次性签名与验证算法,可以解决移动展业环境下对随机签名者的身份认证、签名认证、抗抵赖等一系列问题。
[Abstract]:The field of mobile office has developed rapidly with the technology of various intelligent terminals, but the electronic signature system, which has been developed gradually for many years, can not fully adapt to the current mobile office environment. A secure digital signature that meets the requirements of the electronic signature law cannot be provided to the signer on the mobile side. Third party digital certificate institutions provide conditions for the use of digital certificates in mobile terminal by introducing various new certificate carriers, such as the key of key OTG interface of Bluetooth KeyPad MicroSD card, and solve the problem of certificate usage in the environment of partial fixed signer signature. However, when electronic signatures are applied in mobile exhibition environments such as the signing of medical informed documents, the signing of insurance policies, and the signing of communications service forms, business participants are highly random. Due to the high unit price and long production cycle of digital certificates issued by third-party certification agencies, service providers are unable to provide effective digital certificates for customers involved in business, resulting in the non-standard application of electronic signature systems in relevant environments. There are greater safety and legal risks. This paper proposes and implements an electronic signature algorithm based on one-off digital certificate, by adding signature document information, signature activity information and handwriting information to digital certificate. A one-off digital certificate is generated by using the relevant cryptographic method. The certificate is used to execute the traditional digital signature to solve the problem of the random signer's digital certificate. At the same time, this paper designs a verification algorithm for one-off digital signature, which can verify the integrity of the signed document and whether the signer's handwriting is modified by the algorithm and the relevant information of the signed document. The identity of the signer and other information related to the signature activity. Through the one-off signature and verification algorithm in this paper, a series of problems such as identity authentication, signature authentication, non-repudiation and so on can be solved.
【学位授予单位】：西南科技大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN918.91

【相似文献】