Common Data Security System Design And Implementation,

Based on the analysis of the network communications security and Electronic Commerce security system, this paper carries out"The Common Data Security System ", which addresses the security requirements of Electronic Commerce. And the Common Data Security System isolates an application from the details of the cryptographic device. The application does not have to change to interface to a different type of device or to run in a different environment. Thus, the application is portable.The Common Data Security System is a set of layered services and associated programming interfaces, providing an integrated set of security services to applications. A set of horizontal layers are interrelated and interact on each other, each providing services to the layer above it. This approach is portable, adaptable, and modular.On the foundation of deeply research for PKCS#11 , the author develops the Add-in Security Module according with CDSA interface by encapsulating PKCS#11 interface.The second level of the Common Data Security System is the Common Security Services Manager, which integrates and manages all categories of security service. And the author develops the Operator Management Module and the Application Security Module in this level. Operator can achieves remote management of the Common Data Security System via Operator Management Module. Application Security Module is designed to defend against the perpetrator who controls the platform and tampers or substitutes application software .It enhances the application system's performance of security.At last, the author applies the Common Data Security System to the payment system of Electronic Commerce and discusses the prospect of wide application in the field of industry control and Intranet.