一种基于PKI的电子印章系统安全应用方案

AN APPLIED SECURITY SCHEME OF ELECTRONIC SEAL SYSTEM BASED ON PKI

针对电子印章网络安全应用需求,提出一种基于网络的电子印章服务平台架构,在分析加密设备的安全性、调用加密设备的流程安全性和服务平台自身设计的安生性等三个方面的安全需求,提出登录身份认证、印章制作、印章发放、盖章、验章、打印等应用流程方案,并基于两对RSA公私钥对的印章签名方案解决了客户端身份和印章同时验证以及同一个文件盖多个章的验证等问题。

To solve the network security problems of electronic seal, an electronic seal service platform based on network is presented. The security of the encryption equipment, the security of the flow of encryption equipment call and the security of the electronic seal platform design are analyzed. An applied security scheme is presented, including identity authentication, seal making, seal distribution, stamping, stamping verification, and seal printing. The problems how to verify a seal client and the seal at the same time and how to verify a file that is stamped many times are solved based on two pairs of RSA keys.