Password Security Services Platform And Design

Cryptographic technique is the main important part of information security. With the increasing business of the banks, higher information security level is demanded. Today the situation of the cryptographic technique used in CCB (China Construction Bank) can not satisfy more and more application systems. The project named "Cryptographic Security Service Platform (CSSP)" appears in the background of these problems. This paper, after analyzing the existent deficiencies of the cryptographic technique that CCB is using, presents the aims of CSSP. CSSP should supply application systems with all kinds of services, such as data encryption or decryption, digital signature or validation, entity authentication, and so on. In order to achieve efficient cryptographic computing, the platform needs to integrate different cryptographic devices from different manufacturers. And they are managed and monitored by the server of the platform. The application system can obtain cryptographic services by calling the interfaces that CSSP provides, such as PKCS11, JCE, or custom interfaces, and the application system need not think about the differences of cryptographic devices. Simultaneously, CSSP should provide key management interfaces, which are used to implement the key management policy for applications. The key management is very important in modern cryptography, also is a crucial content of CSSP. Once an application system uses the platform, the platform will take charge of the key management of the application.This paper introduces some technologies about cryptography and cryptographic interfaces at first, and then designs the frame of CSSP. Also, the paper introduces every compositive module of the system in details. At last, some security problems are being designed and analyzed.CSSP is a basic security platform, whoso purpose is to shield the differences of the cryptographic devices, to provide uniform and convenient cryptographic computing interfaces for the developer of theapplication to supply various ciphe(?) services for the applicntion.CSSP...