校园一卡通应用系统安全方案

:2003-06-17:(1974),,,,1,1,2,1,3(11,530004;2.,530006;3.,230027):JavaJava,,,,:Java;;;:TP393108:A:1005-3751(2003)12-0055-03SecuritySchemeofCampusYicatongApplicationSystemSHIRun2hua1,GELi2na1,2,ZHONGCheng1,3(1.SchoolofComputerandInformationEngineering,GuangxiUniversity,Nanning530004,China;2.ModernEducationalTechnologyCenter,GuangxiUniversityforNationalities,Nanning530006,China;3.DepartmentofComputerScience,UniversityofScience&TechnologyofChina,Hefei230027,China)Abstract:CampusyicatongapplicationsystembasedonJavacardisgreatimportantforschoolmodernizationmanagement.ThispaperintroducesJavacardandcampusyicatongapplicationsystem,anddiscussesthesecuritymechanismofcampusyicatongapplicationsystemfrommulti-pointsofview,thenpresentsaquiteintegratedsecurityscheme.Thisscheme,whichishierarchicalandsystematictoprotectthesystem,protectsboththesystemsownsecurity,whichensuresthesystemtoworknormally,andtheimportantdataandmessagessecurity,whichprovidesaprototypefortheapplicationsystemssecurityanalysisandprotection.Keywords:Javacard;security;encryption;authentication0JavaJava[1][2]Java,,,Java,JavaAppletJCAE(JavaCardApplicationEn2vironment),Java,,Java(API),(Java),,1Java,,Java,,,,,11,,1312200312MicrocomputerDevelopmentVol.13No.12Dec.2003;;,,,,,,,,22.1,,(1):,Internet,,,22(2):,,,,,,,,,,,(3):,,2.2,[3,4],,(),,CA[5],,X.509[6]:()(),,,(1):pin,pin,pin,,()(2)():RC,M=(TC,RC),TCPTEPT(C-C,ESC(M))C-C,SCSTDST(EPT(C-C,ESC(M)))=(C-C,ESC(M)),C-CPCPCPCESC(M),DPC(ESC(M))=M,MTC,MRCRT,M=(TT,RT,RC),TT,RC1PCEPC(C-T,EST(M))ST11SCDSC(EPC(C-T,EST(M)))=(C-T,EST(M)),C-T,PT12PTEST(M),DPT(EST(M))=M651313MTT,14,MRT(3):,(DES)(RAS),:,(Java,)DES,kRASkPx(),,Sxk,km2.3,:,,CORBACORBA,,(Web),AgentAgentAgent,;,,,(3)32.4,,,,,:(1),,,,,,,(2)(),,,,(3),,,,,3,,,,:[1],,.JAVA[M].:,2001.[2].[M].:,1996.[3]SchneierB.:C[M]..:,2001.[4].[EB/OL].[5]PKI[EB/OL].[6]X.509CertificatesandCertificateRevocationLists(CRLS)[EB/OL].(54),(SQLServer),,,:[1].[M].:,1990.[2].SQLServer2000[M].:,2001.7512: