The Identity Authentication & Digital Signature Applyed In One Bank Security Information System

This paper studies the actualities of financial security and risk control, brings forward the framework of bank secure system. Firstly, paper analyzed the importance and demands of secure construction in financial security system. To solve the security control problem, paper proposed the exploitation of security information system based on PKI. Secondly, paper elaborated the security information system as security service system & security application system respectively, and constructed the security information system successfully with the technologies of identity authentication & digital signature. Finally, paper described the running instance of security information system at present.As a basal application technical system of the application software framework in bank financial service, security information system use PKI and related products to solve the security control problems in different operation application systems. Based on unified authentication platform & privileged system, counter operating security authentication administering system, security application system, the bank may effectively achieve the privacy & integrality of those data during the delivery & storage process, and effectively distinguish the identity of the visitors and control the accessed privilege when the bank information system are being visited.This system mainly solve two problems as below:Using the digital certificate to solve the problems on frail protection of counter password & unable affirming the identity on dealing, thus no one can imitate others' identities to carry through relating operations.Using the digital signature as telegraphic test key to solve the problems on telegraphic test key easily being divulged, operating efficiency lowness, forge dealing risk existence, and so on, to meet the demands of account centralized.At present, the system has already granted more than 470,000 certificates totally. All counter-staffers in bank use it to progress ID authentication and some core bank's trade encryption use the digital signature as telegraphic test key. In this mode, it is benefit to keep the system risk, operation risk and moral risk away, stop accidents and unlawful cases. Moreover, it may have a vital significance on ensuring and promoting the healthy, persistent and fast development of application systems.