信息安全研究 ›› 2023, Vol. 9 ›› Issue (5): 461-.

• 技术应用 • 上一篇    下一篇

政务信息系统商用密码集约化平台设计与实现

白荣华1魏强2郭瑞1刘金1   

  1. 1(新疆维吾尔自治区信息中心乌鲁木齐830001)
    2(深圳奥联信息安全技术有限公司广东深圳518000)
  • 出版日期:2023-05-01 发布日期:2023-04-29
  • 通讯作者: 白荣华 高级工程师.主要研究方向为政务网络安全检测评估和密码应用. brh@xj.gov.cn
  • 作者简介:白荣华 高级工程师.主要研究方向为政务网络安全检测评估和密码应用. brh@xj.gov.cn 魏强 工程师.主要研究方向为工业控制密码安全. weiq@myibc.net 郭瑞 高级工程师.主要研究方向为政务网络安全. gr@xj.gov.cn 刘金 工程师.主要研究方向为政务网络风险评估. liuj@xj.gov.cn

Design and Implementation of Cryptography Intensive Platform for  Government Information System

  • Online:2023-05-01 Published:2023-04-29

摘要: 针对电子政务领域密码应用不便捷、不规范、不通用、资源浪费的问题,提出一种体系化、集约化、规范化的技术方案.该方案组合国密SM2,SM3,SM4,SM9算法,形成了集约化的体系框架.将密码基础设施池化,减少信息系统应用密码的负担,提供密码应用统一接口,实现合规、有效、便捷的密码应用.电子政务外网商用密码集约化平台建设试点应用实践表明,该方案可提高密码资源利用率,节省投资,对规模级政务信息系统商用密码应用安全保护具有参考价值.

关键词: 商用密码, 集约化, 政务信息化, 标识密码, 电子政务

Abstract: Aiming at the problems of inconvenient, nonstandard, non universal and waste of resources for cipher application in the field of egovernment, this paper puts forward a systematic, intensive and standardized technical scheme. The scheme combines the SM2, SM3, SM4 and SM9 algorithms to form an intensive system framework, pool the cryptographic facilities, reduce the burden of applying cipher in the information system, provide a unified interface for cryptographic applications, and realize compliant, effective and convenient cryptographic applications. The pilot application practice of cryptographyintensive platform construction of egovernment extranet shows that this scheme can improve the utilization rate of cipher resources and save investment, and has reference value for the security protection of cipher application of scale government information system.Key wordscommercial cryptography; intensification; government informatization; identitybased cryptograph; egovernment
Aiming at the problems of inconvenient, nonstandard, non universal and waste of resources for cipher application in the field of egovernment, this paper puts forward a systematic, intensive and standardized technical scheme. The scheme combines the SM2, SM3, SM4 and SM9 algorithms to form an intensive system framework, pool the cryptographic facilities, reduce the burden of applying cipher in the information system, provide a unified interface for cryptographic applications, and realize compliant, effective and convenient cryptographic applications. The pilot application practice of cryptographyintensive platform construction of egovernment extranet shows that this scheme can improve the utilization rate of cipher resources and save investment, and has reference value for the security protection of cipher application of scale government information system.

Key words: commercial cryptography, intensification, government informatization, identitybased cryptograph, egovernment

中图分类号: