Design And Implementation Of Financial IC Card Key Management System

With the development of Internet technology and the means of communication, each industry has put forward higher requirements for information security. In order to solve the security problems of information system, key management for financial IC card is becoming important. Key management mainly refers to the key generation, distribution, transmission, usage, storage and so on, including all aspects from the generation of the key to the destruction of the key.The main content of this paper is the design and implementation of key management system of financial IC card. Key management system is a set of software and hardware system, supervising various keys of business system from the view of key usage, in which key algorithm and operation is realized by hardware cryptographic devices. Firstly, we introduce the background and significance of the key management system, analyze the domestic and foreign research status and the development trend of key management system. Through the analysis of the defects of financial IC card itself and the problem faced by application system, we illustrate the importance of the IC card key management. Secondly, we analyze the demand of the key management system of financial IC card, including functional and non functional. We determine the three level architecture of key management system, including operating environment, data layer and platform. We discuss the function design of the key management system, put forward the overall design of the system:the symmetric key use two level key management system, in which we get lower key by the dispersion of the upper key between the primary center and the secondary center. At last, we detail the design and implementation method of each module of the subsystem, including key generation, key management service, security authentication and audit services. Then we test the key service layer.The key management system designed in this paper follows the "Chinese financial integrated circuit(IC) specification", implements safety control and management of the key and has good scalability. Preliminary test results show that the key management system implemented in this paper can provide efficient cryptographic services and meet the needs of users.