基于CA的电子印章系统设计与实现

针对分布式层次化网络安全应用,提出了一种分布式简化严格层次结构的PKI信任体系模型,为网络应用提供有效的认证、访问控制、授权、机密性、完整性、非否认服务。在该信任体系模型基础上,提出并建立了由CA签发的发章证书概念,来保证CA所辖域中印章文件的安全。系统通过CA签发的电子印章来对网络中电子公文和印章文件进行数字签名、验证,并由加密证书保护电子公文加密密钥,通过授权服务器管理用户打印印章权限。

Design and Realization of the Secure CA-based Electronic Seal System

To solve the distributed hierarchical network security problems, a distributed simple strictly hierarchical (DSSH) PKI trust model is presented. This model provides effective network security services such as authentication, access control, integrity, confidentiality, non-repudiation and so on. On the basis of the trust model, the concept of the issue-seal certification is presented and established to ensure the security of the seal file in the CA domain. The system implements the digital signature and verification of the electronic documents by the electronic seal. The key, which encrypts and decrypts the electronic documents, is protected by the encryption certification. Finally, the system implements the management of printing seal files abilities through the authority server.