构建安全日志服务器的密钥管理系统

保证日志的安全性是安全日志服务器的一个基本目的，加密和认证是常用的保证日志信息安全性的重要方法，而密钥管理又是其中不可缺少的部件之一。详细阐述了在安全日志服务器中成立密钥管理中心的必要性，提出由密钥管理中心统一负责用户身份的认证和日志文件的加密传送。最后重点讨论了安全日志服务器的密钥管理系统中密钥的分配问题和多个CA之间交叉认证模式的选择。

Building Key Management Based on Secure Audit Log Server

The primary task of secure audit log server is to guarantee security of daily record. Encryption and authentication are important methods guaranteeing the security of daily record. The management of key is one of the indispensable part which guarantees the security. In this paper, the necessary of building a key manager is described,which authenticates user identity, encrypts and sends the daily record file. In the last paper, the key distribution of the key management system in our security audit log server and the selection of cross certificate models are discussed especially.