密钥管理系统研究与实现

密码技术是信息安全问题的核心技术之一，密钥管理技术是密码技术的基础，在密钥的产生、存储、分配、更新、吊销、控制、销毁等密钥全生命周期过程中保证密钥的安全，保证对称密钥和非对称密钥的有效和安全管理，并提供高效、经济的密钥服务十分关键。文中从基础设施层到系统的管理层设计了将对称密钥和非对称密钥在整体上统一管理的密钥管理系统，实现了对密码设备的实时安全监控，可以作为一个独立提供对称密钥和非对称密钥全生命周期安全管理服务的密钥管理系统，也可以扩展作为数字证书发布系统的密钥管理系统后台。

Research and Implementation of Key Management System

Cryptographic technology is one of the core technologies of information security, which is basis of key management. To provide efficient and economic key service, it is of crucial importance to ensure the safety of secret key throughout the process of the whole life cycle includes system initialization, key generation, key encasement, key distribution, key storage, key renovation, key destruction, and to assure the effective and safety management of symmetric key and asymmetric key. Describe the design of key management system from the infrastructure layer to the management layer, the system provides real-time safety monitoring of cryptographic devices, key management system can be used as an independent with a symmetric key and asymmetric key lifecycle safety management services, also can be extended to be the key provider of CA （Certificate Authority） system.