多任务密码服务系统设计与实现

在当前的安全体系架构中，大多数密码服务均由密码服务中间件保障，其共同特点是功能性强但安全性不高。针对上述问题指出了一种解决思路，将密码运行与密钥管理下移至安全的硬件设备内。ISO／IEC7816标准是当前智能卡的国际标准，其中7816-8描述与安全相关的行业间命令。文章在结构上改进一个以ISO／IEC7816-8为设计蓝本的密码服务系统，加入一个中间层，称之为运行环境，设计了运行环境的结构；设计完善了管理安全环境命令；制定了密码服务多任务运行调度策略，实现了任务间的动态切换，得到了一个多任务密码服务系统。

Design and Implementation of Multi Tasking Cryptography Service System

In recent security architectures, most cryptography services are gained by cryptography service midwares, their common feature is strong functionality, but weak security. This problem is solved by putting the running of cipher and the management of keys down into safe hardwares. ISO/IEC 7816 series of standards are international standards of smart card, and ISO/IEC 7816 8, one of them, describes security related commands between industries. The architecture taking ISO/IEC 7816 8 standard as the design prototype is improved by adding one midlayer named running environment, whose structure is designed. This paper also designs and consummates the Manage Security Environment commands, establishes the policy of running multi tasks, implements the dynamic selecting between tasks, achieves a multi tasking system.