电子签章系统中PKI与数字水印技术的研究及应用
|
摘要
在互联网飞速发展的今天,随着办公自动化技术在政府和企业中的大量应用,自动化办公应用正变得越来越广泛,其高效、节约资源的优势也日益凸显。而在自动化办公中,如何保障电子文档的完整性、机密性、文档发送者身份的可认证性以及签署人的抗抵赖性成为亟需解决的问题。电子签章技术正是在此背景下提出的,并成为当前信息安全技术领域和计算机应用领域研究的热点和难点。
本文研究并设计了基于数字签名与数字水印认证的电子签章系统。该系统将数字签名、易损水印、鲁棒水印相结合,基于数字签名与数字水印的认证机制,使用COM组件技术,实现了文档认证、身份认证,图章版权保护等功能。理论分析与实践证明,该系统具有较强的安全性、实用性、易用性。
本文的主要研究内容包括以下三个方面:
(1)在分析研究实现电子签章系统相关的数字签名技术和公钥基础设施(public key infrastructure,PKI)技术等的基础上,讨论了基于PKI体系的电子签章系统及其安全性。
(2)介绍数字水印技术的理论基础,将数字签名与数字水印作比较,针对数字签名在保障电子签章系统安全性中的缺陷,提出了一种结合数字签名与数字水印的电子签章加密算法。实验结果表明,该算法对基于PKI体系的电子签章方案进行了改进,能大大提高电子签章系统的安全性,加大了对“电子图章”的版权保护。
(3)针对电子签章系统中的电子签章证书签发管理系统与基于Office文档的电子签章应用系统进行了详细分析并提出了该系统的设计方案,最后给出了基于Word 2003与Excel 2003应用的具体实例。
Today, the internet is developing rapidly, and with the office automation technology in a large number of government and enterprise applications, office automation applications are becoming more popular. The advantages of high efficiency and resource conservation are also increasingly prominent in the process of office automation. How to protect the integrity and confidentiality of electronic documents, how to confirm the identity of the document sender, how to prevent the signer deny the signature, these problems need to be solved. Electronic seal technology is proposed in the background of the above. Electronic seal technology now has become the hot and difficult point of the field of information security technology and computer applications.
This paper researches an electronic seal system based on digital signature and digital watermarking. Combining with digital signatures, fragile watermarking, robust watermarking, the system is based on authentication mechanism. It used com component technology and implemented the function of the document authentication, identity authentication and seal copyright protection. Theory and practice proved that the system has improved significantly in the information security of electronic documents protection.
The main research contents are concluded as follows:
i. Analysis and researches digital signature and PKI technology with the relation of the electronic seal system. The electronic seal system based on PKI and the safety of the system is discussed.
ii. The theoretical basis of digital watermarking technology is instructed. Compared with the digital signature and digital watermarking technology, in order to improve the safety of signature digital in the electronic seal system, an electronic seal encryption algorithm combining with digital signature and digital watermarking is proposed. The result of experiment shows that the algorithm has improved the safety of the electronic seal system and the function of protecting the copyright of the electronic seal is enhanced.
iii. Electronic seal certificate management system and electronic seal system based on office document are analyzed and designed. The application of electronic seal system in Word 2003 and Excel 2003 is demonstrated.
本文研究并设计了基于数字签名与数字水印认证的电子签章系统。该系统将数字签名、易损水印、鲁棒水印相结合,基于数字签名与数字水印的认证机制,使用COM组件技术,实现了文档认证、身份认证,图章版权保护等功能。理论分析与实践证明,该系统具有较强的安全性、实用性、易用性。
本文的主要研究内容包括以下三个方面:
(1)在分析研究实现电子签章系统相关的数字签名技术和公钥基础设施(public key infrastructure,PKI)技术等的基础上,讨论了基于PKI体系的电子签章系统及其安全性。
(2)介绍数字水印技术的理论基础,将数字签名与数字水印作比较,针对数字签名在保障电子签章系统安全性中的缺陷,提出了一种结合数字签名与数字水印的电子签章加密算法。实验结果表明,该算法对基于PKI体系的电子签章方案进行了改进,能大大提高电子签章系统的安全性,加大了对“电子图章”的版权保护。
(3)针对电子签章系统中的电子签章证书签发管理系统与基于Office文档的电子签章应用系统进行了详细分析并提出了该系统的设计方案,最后给出了基于Word 2003与Excel 2003应用的具体实例。
Today, the internet is developing rapidly, and with the office automation technology in a large number of government and enterprise applications, office automation applications are becoming more popular. The advantages of high efficiency and resource conservation are also increasingly prominent in the process of office automation. How to protect the integrity and confidentiality of electronic documents, how to confirm the identity of the document sender, how to prevent the signer deny the signature, these problems need to be solved. Electronic seal technology is proposed in the background of the above. Electronic seal technology now has become the hot and difficult point of the field of information security technology and computer applications.
This paper researches an electronic seal system based on digital signature and digital watermarking. Combining with digital signatures, fragile watermarking, robust watermarking, the system is based on authentication mechanism. It used com component technology and implemented the function of the document authentication, identity authentication and seal copyright protection. Theory and practice proved that the system has improved significantly in the information security of electronic documents protection.
The main research contents are concluded as follows:
i. Analysis and researches digital signature and PKI technology with the relation of the electronic seal system. The electronic seal system based on PKI and the safety of the system is discussed.
ii. The theoretical basis of digital watermarking technology is instructed. Compared with the digital signature and digital watermarking technology, in order to improve the safety of signature digital in the electronic seal system, an electronic seal encryption algorithm combining with digital signature and digital watermarking is proposed. The result of experiment shows that the algorithm has improved the safety of the electronic seal system and the function of protecting the copyright of the electronic seal is enhanced.
iii. Electronic seal certificate management system and electronic seal system based on office document are analyzed and designed. The application of electronic seal system in Word 2003 and Excel 2003 is demonstrated.
引文
[1]全国人民代表大会常务委员会.中华人民共和国电子签名法[EB/OL]. (2004)[2011-03-03]. http://news.xinhuanet.com/zhengfu/2004-08/30/content_1924493.htm
[2]陈雪珲,李建华.电子签章系统在企业OA系统中的应用[J].信息技术与信息化, 2008, 3(1):49-51
[3]郭正荣,周城.基于PKI的电子签章系统的实现[J].计算机科学, 2006, 33(9):83-88
[4]刘宏伟.基于身份的电子签章系统设计研究[J].计算机工程与设计, 2008, 29(7):1735-1738
[5]袁晓宇,张其善.基于智能卡的RSA数字签名实现关键问题解析[J].电子学报, 2004, 32(11):1897-1900
[6]张敏情,张斌,户军茹.电子政务中基于椭圆密码体制的电子签章系统[J].计算机工程, 2009, 31(11):151-153
[7]张飞,肖刚,程振波.基于时间戳服务的电子签章验证方法研究[J].浙江工业大学学报, 2007, 37(3):300-305
[8]徐刚毅,喻建平,谢维信.密码学与数字水印在电子印章中的应用[J].微机发展, 2004, 14(11):136-138
[9] Behrouz A. F.密码学与网络安全[M].北京:清华大学出版社, 2009
[10]钟桦,张小华,焦李成.数字水印与图像认证[M].西安:西安电子科技大学出版社, 2006
[11] Ma Bin, Xu Jian. Electronic seal system based on RSA algorithm and public-key infrastructure[C] //Proc of International Conference on Networking and Digital Society, Beijing: Peking University Press, 2010:636-639
[12] Zhang Shanjun, Zhu Hongbing. Document contents image critical issuing of authorized electronic seal[C] //Proc of the Second International Conference on Intelligent Networks and Intelligent Systems, Washington DC: IEEE Computer Society Press, 2009:661-664
[13] Zeng Fanfeng, Chen Haoming. An improved digital watermarking algorithmdedicated to electronic seal[C] //Proc of the Third International Symposium on Intelligent Information Technology Application, Berlin: Springer, 2009:337-339
[14] Singh G. B. watermarking algorithm based on combination of DCT[J]. Computer Knowledge and Technology, 2009, 5(9):38-42
[15]朱从旭.实现图像版权通知、保护和内容认证的多功能水印[J].通信学报, 2009, 30(11):101-104
[16] Kirk S. ATL Internals[M].赖仪灵,曹雨田,译.北京:电子工业出版社, 2007
[17] Andrew Nash.公钥基础设施(PKI)实现和管理电子安全[M].北京:清华大学出版社, 2003
[18] Stallings W.密码编码学与网络安全:原理与实践[M].北京:电子工业出版社, 2006
[19]尹浩,林闯,邱锋,丁嵘.数字水印技术综述[J].计算机研究与发展, 2005, 42(7):1093-1099
[20]潘爱民. com原理与应用[M].北京:清华大学出版社, 2000
[21] Kruglinski D. J. Visual C++6.0开发技术内幕[M].希望图书创作室译.北京:机械工业出版社, 1999
[22]胡军全,黄继武,张龙军.结合数字签名和数字水印的多媒体认证系统[J].软件学报, 2003, 14(6):1157-1163
[23]赵泽茂.数字签名理论[M].北京:科学出版社, 2007
[24]张先红.数字签名原理技术[M].北京:机械工业出版社, 2004
[25]谢冬青,冷健. PKI原理与技术[M].北京:清华大学出版社, 2004
[26] Pfleeger C. P. Security in computing[M].北京:电子工业出版社, 2007
[27] Gennaro R. RSA-Based undeniable signatures[J]. Journal of cryptology, 2000, 13(4):397-416
[28] Cramer R, Shoup V. Signature schemes based on the strong RSA assumption[J]. ACM Transactions on Information and System Security, 2007, 11(3):161-185
[29] Jiwu H, Yun Q. S. An adaptive image watermarking scheme based on visual masking[C] //Proc of the IEEE: Electronics Letters, 1998, 34(8):748-750
[30] Sequeria A, Kundur D. Communication and information theory in watermarking:Asurvey[J]. Multimedia Systems and Application, 2001, 45(18):216-227
[31] Nahrstedt K, Dittmann J, Wohlmacher P. Approaches to multimedia and security[C] // Proc of the IEEE International Conference on Multimedia and Expo. New York: IEEE Computer Society Press, 2000, 1275-1278
[32] Deng H, Gong L, Lazer A. Practical protocols for certified electronic mail[J]. Journal of Network and System Management, 1996, 4(3):279-297
[33] Lin E, Delp E. A review of fragile image watermarks[C] // Proc of the Multimedia and Security Workshop at ACM Multimedia’99. Orlando: ACM Press, 1999, 35-39
[34] Cox J. Watermarking as Communications with Side Information[C] //Proc of the IEEE. 1999, 87(7):1127-1141
[35] Cohen A. S. The Gaussian Watermarking Game[C] //Proc of IEEE Trans on information theory, 2002,48(6):1639-1667
[36]尤新刚,郭云彪,周琳娜.峰值信噪比不宜用来评价信息隐藏技术[C].信息隐藏全国学术研讨会, 2001,北京:51-56
[37]杨俐国,李眷霞,孙枫等.小波域图像零水印技术的研究[J].中国图像图形学报, 2003, 8(6):664-669
[38]曹正军,刘木兰.一个基于强RSA数字签名方案的改进[J].计算机学报, 2006, 29(9):1618-1621
[39]黄继武,程卫东. DCT域图像水印的嵌入对策和算法[J].电子学报, 2000, 28(4):57-60
[40]孙中伟,冯登国. DCT变换域乘嵌入图像水印的检测算法[J].软件学报, 2005, 16(10):1778-1804
[41]张向华,韦鹏程.基于信息论的数字水印研究[J].计算机科学, 2009, 36(3):248-255
[42]盛小钢.基于数字签名的电子签章系统研究与实现[D].郑州:中国人民解放军信息工程大学电子技术学院, 2005
[43]谭凯军,谭鸿文,顾尚杰.基于数字签名方案DSS/DSA的几种应用方案[J].计算机研究与发展, 1993, 36(5):632-637
[44]徐秋亮.改进门限RSA数字签名体制[J].计算机学报, 2000, 23(5):449-453
[45] Bruce S.应用密码学协议、算法与C源程序[M].吴世忠,祝世雄,张丈政译.北京:机械工业出版杜, 2000
[46]邹潇湘.多媒体数字水印技术研究[D].北京:中国科学院计算机技术研究所, 2003
[47]周永磊,王京春.结合数字水印和签名的二值图像内容验证[J].计算机工程与应用, 2004, (15):55-61
[48]贺卫红,曹毅. RSA公钥密码体制在数字签名中的应用[J].微机发展, 2003, (9):49-53
[49]洪琳,李展.数字签名、数字信封和数字证书[J].计算机应用, 2000, 20(2):41-44
[50]黄松,杨华千,张伟,韦鹏程.一个新的基于DCT的自适应数字水印算法[J].计算机科学, 2006, 33(6):148-149
[51]陈晓苏,胡蕾,肖道举.一个基于PKI和数字水印的数字版权保护框架模型[J].计算机工程与科学, 2005, 27(6):12-14
[52]陈灿,胡峰松,周海燕.基于尺度不变特征点的抗几何攻击水印算法[J].计算机工程, 2007, 33(11):157-159
[53]张杰勇,刘守义,尹忠海.一种抗几何攻击盲数字水印方法[J].计算机应用, 2008, 28(9):2049-2051
[54]刘九芬,黄达人,黄继武.图像水印抗几何攻击研究综述[J].电子与信息学报, 2004, 26(9):1495-1503
[55]肖迎杰,孙劲光,张云.一种模板和图像特征相结合的数字水印算法[J].计算机应用, 2010, 30(1):50-53
[56]闫义.电子印章系统设计[D].吉林:吉林大学计算机科学与技术学院, 2009
[57]孙维涛.密钥管理系统构建及其安全性研究[D].北京:北京邮电大学, 2004
[58]王欣. PKI中加解密系统的研究[D].北京:北京交通大学, 2004
[59]张军.电子印章生成检验系统的设计与开发[D].云南:云南大学, 2004
[60]刘洋.电子印章系统和电子印章在CA中的应用[D].北京:北京邮电大学, 2004
[61]谢恒跃.基于数字签名的电子印章系统的设计与实现[D].上海:同济大学, 2006
[62]方亚伟.安全电子签章系统的技术研究与实现[D].上海:复旦大学, 2006
[2]陈雪珲,李建华.电子签章系统在企业OA系统中的应用[J].信息技术与信息化, 2008, 3(1):49-51
[3]郭正荣,周城.基于PKI的电子签章系统的实现[J].计算机科学, 2006, 33(9):83-88
[4]刘宏伟.基于身份的电子签章系统设计研究[J].计算机工程与设计, 2008, 29(7):1735-1738
[5]袁晓宇,张其善.基于智能卡的RSA数字签名实现关键问题解析[J].电子学报, 2004, 32(11):1897-1900
[6]张敏情,张斌,户军茹.电子政务中基于椭圆密码体制的电子签章系统[J].计算机工程, 2009, 31(11):151-153
[7]张飞,肖刚,程振波.基于时间戳服务的电子签章验证方法研究[J].浙江工业大学学报, 2007, 37(3):300-305
[8]徐刚毅,喻建平,谢维信.密码学与数字水印在电子印章中的应用[J].微机发展, 2004, 14(11):136-138
[9] Behrouz A. F.密码学与网络安全[M].北京:清华大学出版社, 2009
[10]钟桦,张小华,焦李成.数字水印与图像认证[M].西安:西安电子科技大学出版社, 2006
[11] Ma Bin, Xu Jian. Electronic seal system based on RSA algorithm and public-key infrastructure[C] //Proc of International Conference on Networking and Digital Society, Beijing: Peking University Press, 2010:636-639
[12] Zhang Shanjun, Zhu Hongbing. Document contents image critical issuing of authorized electronic seal[C] //Proc of the Second International Conference on Intelligent Networks and Intelligent Systems, Washington DC: IEEE Computer Society Press, 2009:661-664
[13] Zeng Fanfeng, Chen Haoming. An improved digital watermarking algorithmdedicated to electronic seal[C] //Proc of the Third International Symposium on Intelligent Information Technology Application, Berlin: Springer, 2009:337-339
[14] Singh G. B. watermarking algorithm based on combination of DCT[J]. Computer Knowledge and Technology, 2009, 5(9):38-42
[15]朱从旭.实现图像版权通知、保护和内容认证的多功能水印[J].通信学报, 2009, 30(11):101-104
[16] Kirk S. ATL Internals[M].赖仪灵,曹雨田,译.北京:电子工业出版社, 2007
[17] Andrew Nash.公钥基础设施(PKI)实现和管理电子安全[M].北京:清华大学出版社, 2003
[18] Stallings W.密码编码学与网络安全:原理与实践[M].北京:电子工业出版社, 2006
[19]尹浩,林闯,邱锋,丁嵘.数字水印技术综述[J].计算机研究与发展, 2005, 42(7):1093-1099
[20]潘爱民. com原理与应用[M].北京:清华大学出版社, 2000
[21] Kruglinski D. J. Visual C++6.0开发技术内幕[M].希望图书创作室译.北京:机械工业出版社, 1999
[22]胡军全,黄继武,张龙军.结合数字签名和数字水印的多媒体认证系统[J].软件学报, 2003, 14(6):1157-1163
[23]赵泽茂.数字签名理论[M].北京:科学出版社, 2007
[24]张先红.数字签名原理技术[M].北京:机械工业出版社, 2004
[25]谢冬青,冷健. PKI原理与技术[M].北京:清华大学出版社, 2004
[26] Pfleeger C. P. Security in computing[M].北京:电子工业出版社, 2007
[27] Gennaro R. RSA-Based undeniable signatures[J]. Journal of cryptology, 2000, 13(4):397-416
[28] Cramer R, Shoup V. Signature schemes based on the strong RSA assumption[J]. ACM Transactions on Information and System Security, 2007, 11(3):161-185
[29] Jiwu H, Yun Q. S. An adaptive image watermarking scheme based on visual masking[C] //Proc of the IEEE: Electronics Letters, 1998, 34(8):748-750
[30] Sequeria A, Kundur D. Communication and information theory in watermarking:Asurvey[J]. Multimedia Systems and Application, 2001, 45(18):216-227
[31] Nahrstedt K, Dittmann J, Wohlmacher P. Approaches to multimedia and security[C] // Proc of the IEEE International Conference on Multimedia and Expo. New York: IEEE Computer Society Press, 2000, 1275-1278
[32] Deng H, Gong L, Lazer A. Practical protocols for certified electronic mail[J]. Journal of Network and System Management, 1996, 4(3):279-297
[33] Lin E, Delp E. A review of fragile image watermarks[C] // Proc of the Multimedia and Security Workshop at ACM Multimedia’99. Orlando: ACM Press, 1999, 35-39
[34] Cox J. Watermarking as Communications with Side Information[C] //Proc of the IEEE. 1999, 87(7):1127-1141
[35] Cohen A. S. The Gaussian Watermarking Game[C] //Proc of IEEE Trans on information theory, 2002,48(6):1639-1667
[36]尤新刚,郭云彪,周琳娜.峰值信噪比不宜用来评价信息隐藏技术[C].信息隐藏全国学术研讨会, 2001,北京:51-56
[37]杨俐国,李眷霞,孙枫等.小波域图像零水印技术的研究[J].中国图像图形学报, 2003, 8(6):664-669
[38]曹正军,刘木兰.一个基于强RSA数字签名方案的改进[J].计算机学报, 2006, 29(9):1618-1621
[39]黄继武,程卫东. DCT域图像水印的嵌入对策和算法[J].电子学报, 2000, 28(4):57-60
[40]孙中伟,冯登国. DCT变换域乘嵌入图像水印的检测算法[J].软件学报, 2005, 16(10):1778-1804
[41]张向华,韦鹏程.基于信息论的数字水印研究[J].计算机科学, 2009, 36(3):248-255
[42]盛小钢.基于数字签名的电子签章系统研究与实现[D].郑州:中国人民解放军信息工程大学电子技术学院, 2005
[43]谭凯军,谭鸿文,顾尚杰.基于数字签名方案DSS/DSA的几种应用方案[J].计算机研究与发展, 1993, 36(5):632-637
[44]徐秋亮.改进门限RSA数字签名体制[J].计算机学报, 2000, 23(5):449-453
[45] Bruce S.应用密码学协议、算法与C源程序[M].吴世忠,祝世雄,张丈政译.北京:机械工业出版杜, 2000
[46]邹潇湘.多媒体数字水印技术研究[D].北京:中国科学院计算机技术研究所, 2003
[47]周永磊,王京春.结合数字水印和签名的二值图像内容验证[J].计算机工程与应用, 2004, (15):55-61
[48]贺卫红,曹毅. RSA公钥密码体制在数字签名中的应用[J].微机发展, 2003, (9):49-53
[49]洪琳,李展.数字签名、数字信封和数字证书[J].计算机应用, 2000, 20(2):41-44
[50]黄松,杨华千,张伟,韦鹏程.一个新的基于DCT的自适应数字水印算法[J].计算机科学, 2006, 33(6):148-149
[51]陈晓苏,胡蕾,肖道举.一个基于PKI和数字水印的数字版权保护框架模型[J].计算机工程与科学, 2005, 27(6):12-14
[52]陈灿,胡峰松,周海燕.基于尺度不变特征点的抗几何攻击水印算法[J].计算机工程, 2007, 33(11):157-159
[53]张杰勇,刘守义,尹忠海.一种抗几何攻击盲数字水印方法[J].计算机应用, 2008, 28(9):2049-2051
[54]刘九芬,黄达人,黄继武.图像水印抗几何攻击研究综述[J].电子与信息学报, 2004, 26(9):1495-1503
[55]肖迎杰,孙劲光,张云.一种模板和图像特征相结合的数字水印算法[J].计算机应用, 2010, 30(1):50-53
[56]闫义.电子印章系统设计[D].吉林:吉林大学计算机科学与技术学院, 2009
[57]孙维涛.密钥管理系统构建及其安全性研究[D].北京:北京邮电大学, 2004
[58]王欣. PKI中加解密系统的研究[D].北京:北京交通大学, 2004
[59]张军.电子印章生成检验系统的设计与开发[D].云南:云南大学, 2004
[60]刘洋.电子印章系统和电子印章在CA中的应用[D].北京:北京邮电大学, 2004
[61]谢恒跃.基于数字签名的电子印章系统的设计与实现[D].上海:同济大学, 2006
[62]方亚伟.安全电子签章系统的技术研究与实现[D].上海:复旦大学, 2006