铁路无线售票系统安全技术研究及应用

Research and Application of Railway Radio Ticketing System Safety Technology

根据实际需求,提出了适合铁路无线售票系统的安全理念,以成熟的技术、较小的投资代价建立多层次的防御体系,来保证无线售票终端与客票系统安全、高效地交易并可靠地工作。从智能卡用户管理、设置管理服务器和无线接入的连接方式三个方面详细论述铁路无线售票系统安全体系的构建;研究密码技术在铁路无线售票系统中的应用,制定了一套完整的加解密技术实现方案,并针对该系统提出了认证机制、密钥管理、备份恢复、加密防伪和日志记录等一系列应用系统安全管理技术。

According to the actual requirements, this paper puts forward a new safety concept applicable to the railway radio ticketing system. The mature techniques and economic measures are adopted to build a protection system on multilayers. The primary target is safety and efficiency of transaction between the radio ticketing terminal and the railway ticketing system. The paper elaborates the formation of the safety system of railway radio ticketing system, which includes user management with smart card, supervisory server and connection mode of wireless bonding. The paper points out how to apply the cryptographic technique to the system and formulates a set of integral implement method for encryption and decipherment. This paper brings forward a series of security management techniques of the application system, involving identification mechanism, key management, backup and recovering, encrypting against counterfeit and log record.