社保卡的安全体系研究

The Security of Social Security Card System

IC卡作为一种微型智能产品，目前广泛应用于各行各业。社保卡采用的是IC卡其中的一种，即CPU卡。社保卡作为在劳动保障领域办理有关事务的身份验证和交易消费的唯一电子凭证．安全性尤为重要。通过对社保卡内部结构和安全体系的设计要求的分析，在着重探讨社保卡的安全体系划分（安全状态、安全属性、安全机制、密码算法和密钥管理）、如何通过卡内操作系统COS来管理卡内软硬件资源以及如何通过安全通道与外界交换信息来保证用户数据安全的传输的基础上，以达到社保卡安全应用的目的。

IC card as a kind of micro intelligent products, is widely used in all fields. Social Security Card uses one of IC cards, which is known as the CPU card. Social Security Card as the sole electronics certificate for authentication-related affairs and transactions in the field of Labor and Social Security, the security of it is particularly important. Through the analysis of introduce the internal structure and security system design requirements of Social Security Card. In the while, in order to achieve the purpose of security applications, we focused on how to compartmentalize the security system of Social Security Card （security status, security attributes, security mechanisn：：, cryptographic algorithms and key management）, and how to manage hardware and software through the card operating system （COS） and how to ensure the safety of user data transmission through a secure channel to exchange information with the outside.