The Design And Implementation Of The Key Management Service

With the continuous development of the Internet technology,information security has turned into a crucial and unavoidable issue.An important part of solving information security is information encryption,which involves key related issues,for instance,the generation,distribution,conservation and renewal of keys.Therefore,the key becomes the core element of information security,and how to ensure the security of the key becomes the core of information security.The question of how to properly manage keys is critical to protecting information security.In the present,a wide range of key processing methods are used for key localization and hardware solution.Key localization can cause that secret keys will be scattered in code and configuration files,and lack of unified management will result in huge development and maintenance costs,and it will be difficult to meet the requirements of distributed and big data.The Hardware solution is mainly to adopt the HSM(Hardware Security Module),and the Security is really high,but the cost is too high.If the key management service sovles the problem by using the hardware,it is not realistic.The Key Management Service implemented in this thesis is based on the concept of cloud Service and the combination of software and hardware,which is a new solution to such problems.This thesis focuses on the design and implementation of key management service,and carries out the following tasks:(1)Introduced the MVC design pattern,SpringMVC framework,Spring framework,MyBatis framework and other technologies involved in this project,and analyzed their core concepts,advantages and disadvantages.(2)analyze the basic requirements of the project,identify and outline the overall design ideas of the project according to the requirements,organize and divide the modules of the project,and design the system data structure.This thesis mainly presents the design of the overall architecture of the service,the SDK,business logic layer and data persistence layer design of key management service based on SpringMVC,Spring and MyBatis framework.(3)On the basis of system's requirements analysis and the overall design,the implementation of creating key,enabling key,disabling key,encryption,decryption and other representative functions are described in detail.