智能IC卡公共钥签名系统的实现方法比较

在大规模分布式计算机应用系统中 ,由于涉及的用户数量多、分布广 ,对系统的安全要求不同 ,所以 ,集中的安全管理机制实现困难 ,并且潜在风险巨大。基于智能 IC卡的公共钥加密与签名方法为实现非集中管理提供安全可靠的解决方法。从目前IC卡的性能上看 ,智能 IC卡是一个完备的微型计算机系统 ,构造基于智能 IC卡的公共钥签名系统主要应考虑高层次安全协议的实现。本文在给出基于 RSA、DSA和零知识等实现公共钥签名算法的基础上 ,比较分析了它们在 IC卡上实现时的优势和限制因素。这对选择不同算法 ,在 IC卡上实现公共钥签名系统有重要的指导意义

Comparison with Implementation Methods for Smart IC Card Public-Key Digital Signature Cryptosystem

In large scale distributed computer networks,centralized security management is hard to operate and the potential risk is high because of the large number of distributed users who have different level of security requirements.Public-key encryption(PKE) and Public-key Digital Signature(PKDS) based on IC cards provide operational and reliable solutions for uncentralized management of computer networks.A smart IC cards is a self-contained computer system and the main point to consider is the high level protocol for the security of PKDS.After introducing the methods such as RSA,DSA and zero-knowledge for PKDS implementation,this paper presents comparison to their advantages and limitations.This is an important outline to the selection of a suitable algorithm between different options for the realization of PKDS based on smart IC card.