基于移动数字证书的铁路身份认证方案研究

Research on Railway Identity Authentication Scheme Based on Mobile Digital Certificate

在移动互联网的广泛应用下,铁路行业业务模式和技术体系发生了深刻的变化,基于USBKey、TF卡实现的传统身份认证方案已无法满足现代数字化铁路信息系统便捷化、轻量化的密码应用需求。为进一步提高铁路各业务系统的安全性和密码应用便捷性,提出一种基于移动数字证书的身份认证方案。该方案利用移动数字证书作为身份凭证,结合密钥分割、协同签名等技术,实现移动设备快速、安全的身份认证,确保身份的真实性和可信度;将国内先进的密码技术与铁路业务深度融合,从密码使用合规性、业务便捷性和应用扩展性等方面为铁路数字化业务赋能,具备较高的可行性和推广价值,可有力推动铁路行业的数字化转型和发展。

With the widespread application of mobile internet,the business model and technological system of the railway industry have undergone profound changes.The traditional identity authentication scheme based on USB Key and TF card can no longer meet the convenient and lightweight cryptographic application requirements of modern digital railway information systems.To further improve the security and convenience of cryptographic application in various railway business systems,an identity authentication scheme based on mobile digital certificate is proposed.This scheme uses mobile digital certificates as identity credentials,and combines technologies such as key splitting and collaborative signatures,so as to achieve fast and secure identity authentication on mobile devices,ensuring the authenticity and credibility of identities.This scheme deeply integrates advanced domestic cryptographic technology with railway business,and empowers railway digital business in terms of cryptography compliance,business convenience,and application extensibility.It has high feasibility and promotion value,and can effectively promote the digital transformation and development of the railway industry.