基于数据库的PKI加密文件系统的研究软件工程专业论文.docxVIP

I I 摘要 摘 要 随着信息技术的飞速发展，数据库的应用十分广泛，深入到各个领域，逐渐成 为了信息系统的核心部分。加密技术是实现信息保密的重要保证，可以使一些重 要数据存储在一台不安全的计算机上，或者在不安全的网络环境中传递。文件系 统在任何操作系统中几乎都处于中心地位。为此，加上 PKI 使文件系统成为数据 库上的加密文件系统，当存储服务器物理安全性都无法保证的条件下，我们仍然 可以保证数据的安全性。 本文首先分析了数据库文件系统的特点，进行了文件系统安全性的分析，提 出了 PKI 型加密文件系统，并介绍了 PKI 体系，分析证书的制作、颁发、续订、 吊销等证书的各种证书的操作。其次采用 OpenSSL 开发工具，在 Windows 2000 Server 环境下，重点实现了 PKI 加密文件系统的 EE、CA 及 RA 功能，深入研究 了加密/证书服务提供模块及签名验证/加解密模块的实现。 最后对整个系统进行安全性分析，从而验证加密文件系统可以很大程度的抵 御恶意攻击，保护数据的安全性。 关键词: 加密文件系统；PKI 系统；服务器；客户端；密钥； II II ABSTRACT ABSTRACT With the rapid development of information technology, database applications are very extensive and in-depth into various fields, and gradually become the core of the information system. Encryption technology implementation are essential to ensure that confidential information, you can make some important data is stored on a computer on unsafe or insecure transmission network environment. File system at any operating system at the center of almost all. To this end, together with PKI to enable file system to become a database on the Encrypting File System, when the storage server physical security can not be guaranteed under the conditions, we can still ensure data security. This article first analyzes the characteristics of the database file system, a file system security analysis, put forward a PKI-based encrypted file system, and introduce the PKI system, analysis of the production of certificates issued, renewed, revoked certificates and other certificates operation. Secondly, the use of OpenSSL development tools, at Windows 2000 Server environment, focusing on implementation of the PKI encrypted file system EE, CA and RA functions, in-depth study of encryption and certificate service provider module and signature verification and implementation of encryption and decryption modules. Finally the whole system safety analysis, which verifies an encrypted file system can withstand a high degree of malicious attacks, protection of data security. Keywords: Encrypting Fil