SM系列密码算法国家标准在金融领域安全交易场景的应用

The Application of SM Series Cryptographic Algorithm National Standard in Secure Transaction Scenarios in the Financial Field

为解决金融领域银企直连场景中上云企业无法使用传统安全硬件的问题,基于GB/T 35275—2017《信息安全技术SM2密码算法加密签名消息语法规范》等SM系列密码算法国家标准,结合密钥分散和协同签名技术,提出了无需硬件安全设备的银企直连方案,以软件的形态为交易提供真实性、机密性、完整性的保护,实现了轻量化、低成本的银企直连。

In order to solve the problem in financial field that cloud-based enterprises cannot use traditional security hardware in the bank-enterprise interconnection scenario,this paper proposes a bank-enterprise interconnection scheme without hardware security devices based on the SM series cryptographic algorithm national standards such as GB/T 35275—2017"Information security technology-SM2 cryptographic algorithm encrypted signature message syntax specification",combined with key distribution and collaborative signature technology.It provides authenticity,confidentiality and integrity protection for transactions in the form of software,achieving lightweight and low-cost bankenterprise interconnection.