电子签章技术及其在网络电子合同中的应用研究

上海交通大学硕士学位论文电子签章技术及其在网络电子合同中的应用研究姓名：李涛申请学位级别：硕士专业：计算机技术指导教师：李建华;蒋兴浩20050924E-SignatureTechnologyandItsApplicationResearchmentInInternetElectronicContractSummaryWiththerapiddevelopmentofinformationtechnology,transactionfrominternethasreplacedtraditionalmodeinmanyways.Howtoidentifysomebodyindifferentplaceandhowtomakesurethee-contractisvalidisveryimportantduringtransaction.E-signproducthasappeared.Nowadays,China’se-signaturelawhasbeencarriedout.E-sealgivesusabestwaytotestifythevalidityofcontract.Thisarticledescribeae-signingmodefacingtothethirdpartandexplainthekeytechnologyinmoredetail.Thisarticleisdividedintofourpartstodemonstratetheapplicationoffacingthethirdpartelectronicsignaturesystem.Thefirstpartdescribese-commercial’sreality,thethreatenofinternettransactionanditssocialbackground.Thesecondpartdescribessometechnicalbackgroundtechnology.Thethirdpartdiscussestheapplicationoffacingthethirdpartelectronicsignaturesystem.Itshowsanon-authorityidentificationsignatureconceptandgivessomethoughtsintransactionmode.Theforthpartdescribesthefunctionofsafetyelectronicsignature.Thethirdpartandtheforthpartisthefocusofthewholearticle.Thelastpartisaboutthecompleteandforeheadoftheelectronicsignaturesystem.KeyWords:E-commercial,E-seal,E-watermark,Digitalautographytechnologyiii20059302005930200593011.1Internet‹‹InternetInternet‹‹‹‹1.1.1z1997415z199771z1997125IBMHPIntel1997261998430200580001.1.2z19912z1994z1994z1997.81997z199710z199836Internetz1998517z1999392020050001999219982000820021001.21.2.1zz3zzz•2.12.1.1(MessageDigest)DigitalFingerprint2.1.2/722.1.3382.1.41211Hash2493HashHash4DTSDTSDTSDTS1.DTS2.DTS3.4.5()610CA5X.509X.5093V3(1)X.509(2)CA(3)(4)CAx.500(5)(6)(7)(8)116X.5097“”KeyEscrowKEKEACACAKEAKEAUniqueIdentifyUIDKEACA1278PKCS#3Diffie-HellmanPKCS#31382.22.2.1TCP/IPTCP/IPInternetTCP/IPTCP/IPTCP/IPTCPIPInternetTELNETFTPSMTPDNSRPCTCPUDPIPICMPLANSX.25APPAIPIP2.2.2SocketSSLSecuritySocketLayerNetscapeWEBSSLSSLX.509SSLSSLSSLSSL14,SSLSSLCACA39SSLIIPPTTCCPPSSSSLLSSSSLLSSSSLLSSSSLLHHTTTTPP152.2.2.1SSL1SSLHashSSLRSA2SSL3SSLV3.04SSLMAC2.2.31Internet,ECInternet(IEFT)PEM:PEMInternet,Internet,,16PEMInternetInternetRFC1421RFC1422RFC143RFC14244PEMS/MIMEPEM-MIMES/MIME:S/MIME(Internet)RFC1521InternetMIMEInternet,S/MIMEMIMES/MIME,NetscapeNovllLotus2SSLSSL()Netscape,TCP/IP/SSLSSLDESMD5,X.509,InternetIntranetNetscapeIBMInternet/Intrnet,VisaSSL,PCT()SSLS-HTTPS-HTTP()HTTP,SSL(wordExcel)18193.1EDIEDI(1)(2)(3)(4)(5)EDIEDI3.2201012345672111CA41CACACACACA2SSLWebSSLWebSSLSSL343.2.11234223.3CACACACACACACTCACACFCACA“”3.3.11()223345612CCooookkiiee(())243.3.22WORDEXCELWPSE-KEYE-KEYUSB13/E-KeyUSB3.3.325E-KEY3.3.3.1/14/123453.3.3.2.123456726153.3.3.3163.3.43.3.4.127173.3.4.21828InternetVPN3.3.51()2.(MD5)(/CA)3.,,(CA):1.,,2.,(1)3.(2)4.12,,,29193.3.6212.SSL/30203.3.71AliceKKDDC2AliceBobKKBDCKB3DCKBHashHashHAliceHA4DCKBHABobEveHashAliceBobDCKBHADCKKBobKBBobHAAliceHHEveBobDCKBHashHashHBHABobKB,KKDCDEveDKBHHABobAlice31213.3.8BobGodBobGod3.3.9PKI324.1CAITUX.509V3RSA-1024/CAST-128B2BB2C4.2zzzzzzz4.3DESRSA33=+4.4Word/ExcelRedofficeE-KEYWord/ExcelRedoffice4.4.1‹Word/Excel/Redoffice/Office/wps/pdfWORDEXCEL‹‹‹:‹:‹:34‹‹‹‹DER‹‹‹‹‹‹IP‹Word,Excel,PDF,WPSInternetActiveXActiveX4.4.2‹35PKI‹,PKICA12‹CRL,,CA,CA,PKI,,36CACRLCACRL,CRLCRL‹,,,PKI22‹PKILDAPLightweight37DirectoryAccessProtocolLDAP‹PKI,PKI‹CACACACAWebCACACAWeb38234.4.3E-KEYE-KEYE-KEY‹PINPIN“”PINPINPINPIN‹‹CPUPKI‹394.4.4E-KEY‹‹‹244.4.54.5()()40123(FRR)(FAR)456--78--4118421.43444546472DSADigitalSignatureAlgorithmDSADSADSApLL512102464q160p-1hp-11xqHmSHApqgxym1qk2rs3v=rDSAp5121024q160p-1hp-11xqkqv=r483VPNVPNVPNVPNVPNVPDNIntranetVPNExtranetVPN1.VPDNVirtualPrivateDialNetworkVPNVPDNNSPNASNetworkAccessServerPPPNASNASPPPNASVPDN2.IntranetVPNLANLANVPNInternetLANLANDDN3.ExtranetVPN49LANLANVPNACLAccessControlListVPNVPNPPTPL2TPIPSecSOCKSv5TCP1.PPTPPoint-to-PointTunnelingProtocol/L2TPLayer2TunnelingProtocol1996MicrosoftAscendPPPPPTPWindowsNTServer4.0WindowsNTWorkstationWindows9.XPPPIPIPXAppleTalkNetBEUIPPPPPTPIPATMPPTPPPTPMicrosoftMPPE:MicrosoftPoint-to-PointEncryption401281996CiscoL2FLayer2ForwardingCisco1997MicorosoftCiscoPPTPL2FL2TPL2TPPPPIPPPTPMPMultilinkProtocolL2TPPPPRFC1663L2TPVPNCHAPL2TPPPTP/L2TPPPTP/L2TPNovellIPXNetBEUIAppleTalkPPTPL2TPIPIPIPPPTPL2TP25550PPTPL2TP2.IPSecInternetProtocolSecurityIPSecIETFInternetEngineerTaskForceIPSecIPAHAuthenticationHeaderIPESPEncapsulatedSecurityPayloadIPSecIPSecIPv6IPSecIPIPSecIPSecIPv4IPIPSecIPSec1997IETFIPSecIPSecISAKMPInternetSecurityAssociationandKeyManagementProtocolOakleyISAKMP/OakleyIPSecSETSecureElectronicTransactionSSLSecureSocketlayerSETSSLIPSecIPSecDESDESIDEAIPSecIPSecTCP/IPVPNsIPSec/IPSecIPIPIP51IPSecTCP/IPIPSecIPSecIPSecLANLAN3.SOCKsv5SOCKsv5NECTCPTCPIPSecL2TPPPTPSOCKsv5SOCKSv5SOCKSSSLSOCKSSOCKSIETFSOCKSMicrosoftNetscapeIBMSOCKSv5SOCKSv5OSIIPSOCKSv5S