一种安全的网上数字签名系统的设计与实现

The Design and Implementation of a Secure Digital Signature System

基于Internet的信息查询系统应用广泛,为了保证查询数据的真实性和权威性,需要信息查询系统对客户查询的数据进行数字签名,以便客户验证数据的来源和完整性。该文设计并实现了一个适用于网上信息查询系统的安全的数字签名系统,该系统能对客户查询的数据进行签名,实现客户对查询数据的来源和完整性进行验证,但在查询服务器上不需要保存签名的私钥,杜绝了私钥被入侵者窃取的风险,从而提高了信息查询系统的安全性。

The information retrieval systems in Internet have grown rapidly during the past years.In order to keep the integrity of the retrieved information,it is necessary to sign the retrieved information before it is returned to the customers.The design and implementation of a secure digital signature system for Internet-based information retrieval system is presented in this paper,which can be used to authenticate the integrity and originality of the retrieved information while avoid the risk of leakage of the private key used to sign the information.