基于双向不可否认技术的安全电子邮件系统

为了提高电子邮件的安全性,针对PGP和S/MIME等安全电子邮件协议中加密算法安全强度不够和没有实现收方不可否认等不足,设计开发了基于双向不可否认技术的安全电子邮件系统。系统采用椭圆曲线加密算法(ECC)取代通用的RSA算法,重新设计了认证中心CA与用户的通信协议,完善了CA的认证和备份功能。通过用户与CA之间的多次验证,并在CA服务器上保留邮件收发双方的加密或解密等相关信息,实现了邮件收发双方的不可否认性。由于系统具有独立的认证中心CA和邮件客户端程序,因此能运用到所有基于POP3协议的邮件系统中。从系统的实际应用来看,该系统不仅具有很高的安全性能和很好的通用性,而且收发双方不可否认性的实现,又提高了电子邮件作为法律依据的可信度。

Secure E-mail System Based on Two-way Non-repudiation Technology

A new system based on two-way non-repudiation technology was designed to improve the E-mail security, aiming at the problem of weak encryption security intensity and without non-repudiation in receiver side in secure e- mail protocol such as PGP and S/MIME.Elliptic Curve Cryptography(ECC) was adopted in this system instead of the RSA,the communication protocol between Certificate Authority CA and users was redesigned and authentication and backup function of CA was improved.Users and CA validate each other times without number,encryption and docryption information was saved in CA server,it was proved to be able to provide the non-repudiation of sender and receiver.The system has unattached CA and client program,thus it could be deployed in e-mail systems based on POP3 protocol.The system not only has high security performance and current performance,but also realized the non-repudiation between sender and receiver,which improved the reliability of e-mail as law gist.peeping the mail.