软件更新安全解决方案研究

Research on security solution for software update

在分布式环境中进行软件更新存在许多安全问题,现有的更新系统都未给出一套完整的安全解决方案.根据对软件更新中安全需求的分析,在Web服务实现的更新系统中,利用XML签名、XML加密等技术实现了一个统一的安全解决方案.最后对方案中采用不同的安全技术进行了性能测试和分析,让用户可以根据自己的需求进行定制.

There are many security problems in the process of software update in distributed systems.All the software update systems available don′t provide a complete security solution to these problems.According to the analysis of the security policy in the software update process,a new complete security solution is presented for the security policy.The security solution for a software update system built in Web service is implemented via the technology of XML signature,XML encryption,etc..Finally some experiments are conducted to test and analyze the performance of the different implementations which adopt different encryption algorithms,so that any one can choose the security technology in the practice according to his own requirements.