基于中间件技术的ERP系统中电子签章软件开发

南京航空航天大学硕士学位论文基于中间件技术的ERP系统中电子签章软件开发姓名：陈兴帮申请学位级别：硕士专业：航空宇航制造工程指导教师：庄海军20080101IPKI(PublicKeyInfrastructure)COM(ComponentObjectModel)COMWEBPKI,,COM,,PKIERPIIAbstractInthelonghistoryofourcountry,thesealandthesignatureshavebeenthesymbolofthepower.Attachingthesealorthesignaturestosomephysicalinformationindicatesthattheownerauthorizesthisinformation.Today,theelectronicinformationtechnologyandthenetworktechnologyisdevelopingrapidlyandthephysicalsignatureandhand-writtensignaturesonpaperdocumentsarestillused.Withthedevelopmentofelectroniccommerce,electronicgovernmentandenterpriseinformatization,theadvantageofthehighefficiencyandtheresource-savingofOA(OfficeAutomation)ishighlightingdayafterdayandtheapplicationofOAisalsomoreandmorewidespread.Howtoguaranteetheintegrity,confidentialityoftheelectronicofficialdocuments,identifiabilityandtraceabilityofsignershasbecomeaproblemtobesolvedurgently.Asabovementioned,theelectronicsealtechnologyisbroughtforward,andithasbecomearesearchfocusintheinformationsecuritytechnologyandthecomputerapplicationdomain.Incorporatingtheelectronicsealandthemiddlewaretechnology,thispaperdesignsandimplementsanelectronicsealsystem.TakingthePublicKeyInfrastructure(PKI)asthesecurityplatformandthedigitalsignaturetechnologyasthesecuritytheorybase,thissystemmeetstherequirementsofinformationsecurityofOA.UsingCOMmoduletechnology,thesystemismadeupofseveralmodules.Eachmoduleenclosesrespectivefunctionandisusedbyothermodulesthroughthestandardinterface.Inaddition,becauseofthereusableandtransplantablepropertyoftheCOMmodule,whenembeddedintoothersystems,itcanachievetheseamlessintegrationandavoidremarkablemodificationtothem.Duringthedesignanddevelopmentofthesoftware,manytechnicalproblemshavebeensolved,includingdigitalcertificatesigningandissuing,embedding,displayingandtherespondingtotheeventofasealcontrolinWEBpages,picturetransparentdisplay,thepick-upofthesignatureandthesafecontrol.TheelectronicsealsystempresentedinthispaperisbasedonthePKIandtheIIIencodedstandardofdigitalsignature,withstrongsafety,practicality,accessibility,expansibility.ThesystemwillbeenappliedtotheinformationmanagementsystemofHONGDUAviationIndustryGroupLTD.KeyWords:electronicseal,middleware,COM,digitalsignature,PKI,11.1OA1.2[1]ERP21.331.4ERP41999200030305020044CCIDCCID200541[2]51.5ERP(EnterpriseResourcePlanning)CAPP(ComputerAidedProcessPlanning)1.6ERP62.1(PKI)PKIPKI2.22.2.12.2.1.12060DES72.2.1.2EkeDkdPPkekdY2.1(1)P(2)Y(3)()E(D)()()(4)KEKePY=EKe(P)YDKdYP=DKd(Y)2.2.1.31)(1)ERP8KeKd[3](2)KeKdKeKd()[4]2)[5](1)PP1P2P3K=K1K2K3()EK(P)=EK1(P1)EK2(P2)EK3(P3)(2)PDES642.2.1.41)[6]MEGABUCK882.292.2A1B2C3E412pleasetransferAFLLSKSOSELAWAIA2)[7]()(Juliuscaeser)abcxyzdefabcdaebKK26262.3attackQZZQEA2.326ERP102.2.22.2.2.1DES(DataEneryptionStandard)IBM1971-19721977ISODESVLSIVLSIDESDEPDES64568DES64566464DES2.4(a)2.4(b)646456Kii=1-16Li-1RiLiRi-1+faDESb2.4DES116464X032L032R0X01656Ki32Li32Ri-132RiKi32Ri-1f32Li-111),(−−⊕=iiiiLKRfR16(64)32322.2.2.2DES[8]DES()()1976DiffieHallman[9](1)EKePkeE(P)DKdkdD(keE(P))=P(2)KeKdKeKd(3)KeKd(4)kdDERP12keEPPDEkdke=))((RSAISORSADSA(DigitalSignatureAlgorithm)EIGamalDiffie-HellmanRSADSARSADSARSA[10]RSARSARSAApqpqn=)1)(1()(−−=Φqpn)(nΦeed1))(,(=Φne)(mod1ndeΦ≡),(en),,(dqphAm)(mhnmhmEcdmod))(()(==cnccDmhemod)()'(=)'(mh)'(mh)(mh),,(dqp13cA2.2.3()[11](1)(2)(3)1)AKdaPDKda(P)BBAKeaDKda(P)EKea(DKda(P))=P2.5(a)2.5:(1)AKeaDKda(P)(2)ADKda(P)A(3)BAB2.5(a)DKda(P)AKeaDKda(P)AB2)ABABERP142.5(b)(1)AKdaPDKda(P)(2)ABKebDKda(P)EKeb(DKda(P))B(3)BKdbDKdb(EKeb(DKda(P)))=DKda(P)(4)BAKeaDKda(P)EKea(DKda(P))=P2.2.42.2.4.1(100)WEB[12](128)[13]x)()'(xhxh=)'('xxx≠15'xx'xxxx≠')()'(xhxh='xxxzxh=)(zzzzxh=)(x2.2.4.2MD5MD5[14]message-digestalgorithm5(-)90Rivestmd2md3md4128MD5[15]MD55121632432432128MD5512448448512*+=KLEN5664*+KK1064512*)1(64448512*+=++=KKLEN51264(bit)8ERP1664*)1(85664*+=++=KKLENMD5:432),,,(DCBA,A0x0124567B0x89abcdefC0xfedcba98D0x76543210AaBbCcDd3ZYX,,3232F(X,Y,Z)=(XandY)or(not(X)andZ)G(X,Y,Z)=(XandZ)or(Yandnot(Z))H(X,Y,Z)=XxorYxorZI(X,Y,Z)=Yxor(Xornot(Z))andnotxorjj(j015)32),,,,,,(isMjdcbaFFdcba),,,,,,(isMjdcbaGGsiTjMdcbGaba++++=])[][),,((((),,,,,,(isMjdcbaHHdcba),,,,,,(isMjdcbaΧ)][][),,((((siTjMdcbIaba++++=))](sin(2[][32iabsiT=ss+32322MD5(64)512][jM(j015)3216][jMdcba1617abcd),,,,,,(isMjdcbaFFabcd16DCBAdcba512DCBA1282.3(PKI)2.3.1PKIERP18PKI[16][17][16][17]PKIPKI[18]CA(CertificateAuthority)X.509(Serialnumber)CA(Subjectname)X.500email(SubjectPublicKeyInfo)(Version)ValidityUTC(UniversalTimeCoordinated)1950-2049CAsignaturealgorithmIDCAHashIssuer'sSignatureIssuerCAX.50019(IssuerUniqueIdentifier)SubjectUniqueIdentifierPKICACAPKIPKI[18][19](2.6)PKI()PKI()ERP202.6PKI2.3.2(Certificate)(1)ACAAA(2)CAAAACACA(CA)(3)ABA()B(4)BCACABCABBB(5)BCABAAA(6)BAAA2.3.3PKI(CA)21(RA)PKIAPIPKI2.7CACARAPKILDAPPKI2.7PKI(CA)PKIPKI(RA)CACACAAPIPKIERP22PKI11)2)CACACACA(LDAPLightweightDirectoryAccessProtocol)(CRLCertificateRevocationList)2PKIPKI323PKI(CRL)CRL45CA6CACACA7PKI8PKI()(2.8)PKIERP24Hash2.82.4PKIPKIPKIMD5RSAPKIRSAMD52.9MKCH(M)SECKM`H(M`)ESH(M)++CAHashHashAB2.9AMD5MH(M)25AAP