基于IBE技术的学分制管理系统安全解决方案

针对目前学分制管理系统存在的数据存储不加密、数据传输不安全、身份验证不严格等问题，分析了用PKI技术解决这些问题的不足，提出了一种基于身份加密技术的改进方案。采用表示用户身份的任意字符串作为公钥、严格验证用户身份、对关键数据进行数字签名、网络传输使用安全连接等方法，保证了数据存储、传输等过程的机密性、完整性、可用性和不可抵赖性，克服了传统PKI技术产生、存储和管理公钥麻烦、系统实现复杂、成本高、效率低等缺点。理论分析和实验结果表明该方法是学分制管理系统安全问题的较好解决方案。

IBE-based Security Solution for Credit Management System

The problems in the current credit management systems of universities and the shortcomings of PKI in dealing with the problems are discussed,and an IBE based security solution to solve the problems is proposed.The public key of users' identity validation and encryption adopts any strings which can describe the identity of users,the key data is figure validated,and the data transmission adopts the secure socket layer.The confidentiality,integrality,usability and the undeniable-ness of data during storage and transmission are all realized.The shortages of PKI,such as difficulty in storing and managing public keys,complexity of implementing,high costs and low performance have been overcome.Thus,it provides a new method to ensure the security of the current credit management systems.