一种简单的密钥管理服务研究及实现

Study and Implementation of Simple Key Management Service

本文通过研究密钥管理服务(KMS)的基本原理,设计了一个由服务端和用户端构成的简单的KMS。在服务端存放主密钥,然后使用用户指定的主密钥完成对数据密钥的加密。用户只部署加密后的数据密钥,然后在需要使用时调用KMS服务解密数据密钥,来实现密钥的安全管理。最后实现了一个简单的密钥管理服务模型并进行了测试。

Through studying the basic principle of key management service (KMS), this paper designs a simple KMS system which composed of server side and user side. The primary key is stored on the server side, and the data key is encrypted by the primary key. Users only store the encrypted data key, and when they need to use the data key to do data encryption, the KMS service will be called to decrypt the encrypted data key. Finally, a simple key management service model is implemented and tested.