信息安全研究 ›› 2018, Vol. 4 ›› Issue (1): 80-83.

• 技术应用 • 上一篇    下一篇

一种对称密钥的密钥管理方法及系统

苏威积1,汤敬浩2,李剑2   

  1. 1. 北京航天爱威电子技术有限公司
    2. 北京邮电大学计算机学院
  • 收稿日期:2018-01-14 出版日期:2018-01-15 发布日期:2018-01-13
  • 通讯作者: 汤敬浩
  • 作者简介:苏威积:博士,研究员,主要研究方向为网络信息安全、计算机软件. 汤敬浩:硕士研究生,主要研究方向为智能网络安全、推荐系统. 李剑:博士,副教授,博士生导师,主要研究方向为智能网络安全、量子密码学.

A Key Management Method and System of Symmetric Key

  • Received:2018-01-14 Online:2018-01-15 Published:2018-01-13

摘要: 密码技术是信息安全问题的核心技术之一,密钥管理技术是密码技术的基础,其在密钥的产生、存储、分配、更新、吊销、控制、销毁等密钥全生命周期过程中保证密钥的安全.而在安防视频监控系统中,每路视频的传输也需要采用对称密钥加密,但传统的对称密钥管理方法是基于共同保存对称密钥实现的,同时要保证彼此密钥的交换是安全可靠的,同时还要设定防止密钥泄密和更改密钥的程序.这样,对称密钥的管理和分发工作将变成一件潜在危险的和繁琐的过程.所以提供一种对称密钥管理方法及TCP服务端系统,所有的对称密钥均加密储存在服务器.用户可以向服务器发送密钥请求,能方便的访问服务器并拿到密钥,并且用户和服务器的通信均通过公钥体系认证并加密,这使得密钥管理既高效合理,又安全可靠.

关键词: 对称密钥, 密钥管理, 非对称密钥, 公钥体系, CA认证

Abstract: Cryptography is one of the core technology of information security, meanwhile, key management technology is the foundation of cryptography. key management typically consists of these steps: generation, storage, exchange, update, revocation, control and destroy. In our video surveillance system, the video transmission of each channel also need encryption using symmetric key. However, the traditional key management method is based on the fact that both entities hold the symmetric key jointly. It will be tedious and dangerous potentially in order to ensure exchange of keys is safe and reliable and to prevent password leakage. To solve the problem, a symmetric key management method and a TCP server system is provided. In our system, all symmetric keys are stored in the server. Users can send requests to the server for getting the valid key, Meanwhile, the connection of users and server is certified and encrypted, making the key management efficient, reasonable, and safe.

Key words: symmetric key, key management, asymmetric key, public key infrastructure, CA certificate