本地提供签名服务系统的设计与实现

Local Signature Providing Service

近年来,随着浏览器更多的依赖基于HTML5/Java Script的扩展技术,Active X技术由于其兼容性差、漏洞多备受诟病,逐渐将被淘汰。目前银行系统广泛采用Active X技术,致使网上银行业务局限性大,亟需一种安全的替代技术。文章设计并实现了一种本地提供签名服务的方案和系统,能够支持不同浏览器,提供安全的数字签名服务。文章提出一种本地HTTP服务,该服务监听特定的端口,与网页脚本代码交互,验证了签名请求者的身份、网页域信息和用户的身份,完成签名工作。该系统使用密钥拆分技术,在保证密钥安全性的同时实现了隐私数据的安全存储,有极高的实用性、安全性和扩展性。

With the browsers increasingly depending on HTML5/JavaScript-based extension technology in recent years, ActiveX technique due to its poor compatibility and various bugs will be removed. For now, ActiveX technique that has been widely adopted by bank systems, causes high limitation in service of online banking, which needs a safe replacement technology. This paper designs and implements a kind of Local Signature Provided Service system, which supports various browsers and provides secure signature service. This paper puts forward a kind of Local HTTP Service,which interact with Web page script. Local HTTP Service verifies identity of signature requester, information of Web page domain and identity of user, then accomplishes the signature process. The Technology of key split is adopted in this system, guaranteeing the security of key while privacy data can be stored safely, which provides high security and scalability.