The Design And Implementation Of Cryptographic Machine System Oriented To Enterprise Terminal Of Bank-enterprise Interlink

Bank is targeted to a great group client, provides a Bank-enterprise Interlink System directly connected to an ERP (Enterprise Resource Planning) system of an enterprise, and provides a multi-channels and customized support for fund management services of the enterprise. The Bank-enterprise Interlink System brings a convenience of a fund management, but also has some problems like security, performance and functionality. Therefore a safety transmission of fund data is required to be realized by using a cryptology, further a high efficiency and a high-performance during the transmission of the fund data should be simultaneously assured to meet requirements of the enterprise, the thesis studies a design and realization of a server cryptographic machine service system targeted to an enterprise terminal in the Bank-enterprise Interlink. The thesis mainly includes the following works:Firstly analyzing an existing safety problem and an application status of the Bank-enterprise Interlink, introducing an encryption technology, digital signature technology, PKI (Public Key Infrastructure) technology and SSL(Secure Sockets Layer) technology which are used in the system.Secondly analyzing the system requirements and providing a system architecture design which includes a network processing module, a cryptographic service module and a cryptoequipment module, the system is logically divided into five subsystems which respectively are a protocol analyzing subsystem, an operation debugging subsystem, a cryptographic service subsystem, an equipment management subsystem and a log backuping subsystem. The system security is analyzed and designed in aspects of secret key, protocol and system management, the subsystems are furthermore respectively implemented, implementation principles and processes of the various subsystems are introduced in detail.Finally, the cryptographic machine service system is tested on a general hardware platform, a performance and a functionality of the system are adequately tested, each of test results is analyzed, the whole test results is gathered so as to obtain a result that the performance and the functionality of the system meet the requirements and conform to design criteria.The thesis is based on a traditional SSL technology and a signature verification technology, the SSL technology is used to transmission encryption, an international algorithm RSA which is used to verify signatures and a high performance encryption card which is used to realize a higher signature speed are integrated so as to obtain a specific cryptosystem which can provide digital signatures and a SSL security encryption, thereby effectively solving the present problem in the enterprise terminal of the Bank-enterprise Interlink.