Digital Signature System Based On Smart Card Applications

The thesis studies the digital signature system based on smart card. This system is an application which combines smart card with PKI (Public Key Infrastructure). It takes advantage of PKI public key theory and technology, the secure and portable smart card which as a storage media of the private key and digital certificate, and implements the functions of digital signature and its authentication, combining the secure middleware technology. The system provides four major security functions:confidentiality, integrity, authentication, non-repudiation. The digital signature system mainly adopts PKI Non-symmetric Encryption Algorithm—different encryption keys and decryption keys. In order to implement the functions of the system, PKI fundamental technology also including Message Digest, Digital Signature, Digital Certificate, Double Digital Signature and so on, as well as Middleware technology.The project designs and implements the digital signature system based on smart card, then, develops a simple electronic medical record system. In this application system, doctors and patients can realize digital signature and signature verification for the electronic medical record. This process verifies the feasibility of the digital signature system. The development of this system is based on B/S structure in WEB.NET environment. It makes use of ActiveX control technology and COM groupware to operate the private key and digital certificate which stored in smart card to implement seals in the web documents. Web server—IIS5.1 provides the WWW service for web-based electronic medical records. The background database of this system adopts SQL Server 2000. The communication between the client and server adopts SSL to ensure the security and integrity of data transmission.With the improvement of the network safety consciousness, the digital signature system is expected to be widely used in e-commerce, e-government, etc.