Research And Implementation Of Objects Management And Random Number Generation In Information Security Toolkit CIST

The rapid development of the Internet and electronic commerce has greatly changed people's life and working style. Meanwhile, it brings many security problems. Therefore information securtity service is becoming more and more important. Information securtity toolkit is the foundation which provids information securtity services. We designed and implemented our copyright toolkit CIST(Chinese Information Security Toolkit) based on object-oriented method . The toolkit can provide many services for information security.In the process of designing CIST, I designed and implemented the object manager and the random number generator.We define an object which can achieve a independent task in security sevices or include a data structure relating to information security. CIST consists of many security objects, these objects include device objects user object, certificate object, keyset object context object, envelope object and session object , they provide security sevices for superstratum applications and users together. The object manager gnarantee objects' security, it has three functions: firstly, it can create objects and destroy objects; secondly, it control users' rights of accessing objects; thirdly, it control users' ways of using objects. In order to ensure these objects' security, the object manager has several techniques: lock mechanism, object access control list, reference counter, usage counter and so on.Among these objects, device object includes a random number generator. The random number generator is the most important part in generating random numbers, it provides random numbers for various keys. The paper designed a software random number generator based on pseudorandom number generator and hareware random number generator overcoming their shortcomings. The software random numbers generator is fit for wide field and the random numbers from the software random number generator are more dependable.The research and development of the CIST will provide powerful sustain for information system's security of our country especially our army. It will bring many society economy benefits and wide outlook.