农业排灌系统中密钥和发卡子系统的设计与实施
|
摘要
农排计量管理系统是基于现代计算机网络通讯技术将排灌用电使用的IC卡、电表的主要业务进行电子化和信息化管理的综合信息系统,是实施“井井通电、户户持卡”的技术基础和重要保证。密钥系统和发卡系统是农排计量管理系统的核心部份,密钥和发卡系统的建设保证了整个农排系统的顺利、安全运行。
本文分析了农排灌密钥和发卡系统的设计方式、系统整体架构和运行方式,对系统的安全性和可靠性做了详细的阐述,详细说明了该系统的功能设计、工作流程设计、界面与视图设计等。文中也给出了系统发出的各种密钥卡、工具卡、用户卡的发行流程等工作细节。
本文设计的系统已经开发完成,在河北省农网排灌计量系统成功应用超过两年时间,并且被河南省电力公司农电工作部采用,在河南农网排灌计量系统中使用超过一年时间。
作者主要进行了如下几个方面的工作：
1、完成了河北省农排收费系统及电表、电表卡、卡片密钥使用的现状分析,同项目组一起分析了河北省农排目前收费系统发展存在的问题,完成了河北省农排使用的智能C P U卡表发展的需求分析；
2、在详细了解需求之后,完成了河北省农排非接触C P U卡表方案设计、使用新方案后收费系统升级改造设计方案、密钥和发卡系统设计方案、新型使用非接触式C P U卡智能电表设计方案、新型电子抄表器设计方案；
3、完成C P U卡片规范编写；
4、完成密钥和发卡系统规范编写,论证了设计方案的可行性,并完成了软件系统的需求分析、概要设计、详细设计以及软件核心功能(密钥分散及下装功能)的流程设计工作；
5、深入地分析了农排密钥和发卡系统今后面临的安全威胁；
Agricultural irrigation and drainage measurement and management system is an integrated information system to carry on electronic and information management to the main business of IC card and electricity meter using in irrigation power consumption based on the modern computer network communication technology, which is the technology basis and important guarantee of "every well is electrified and every family has the card". Secret key system and card issuance system is the core part of the agricultural irrigation and drainage management system, the development of which ensures the smooth and safe operation of the whole agricultural irrigation and drainage system.
This article analyzes the design approach, system overall architecture and operation method of the secret key and card issuance system for agricultural irrigation and drainage, elaborates the system safety and reliability in detail, and explains the functional design, workflow design, interface and view design, and so on. The article also demonstrates the working detail of the issuance process of the various secret key card, tool card and user card issued from the system.
The system developed by this article has already been completed, which has been applied successfully by the Hebei Province agricultural irrigation and drainage measurement system for more than two years, and adopted by the agricultural department of Electric Power Company of Henan Province to use in the Henan agricultural irrigation and drainage measurement system for more than one year.
The author mainly carried out the following aspects of work:
1、Complete the status analysis of Hebei province agricultural charging system and its electricity meter, electricity meter card and card secret key application, analyze the problems in the development of current charging system together with the project team and complete the demand analysis of intelligent CPU card meter using by the Hebei province agricultural irrigation.
2、After understanding the detailed requirements, the author complete the conceptual design of non-contact CPU card meter of Hebei Province agricultural irrigation and drainage, upgrading design of the new charging system, design of secret key and card issuance system, design of new non-contact CPU card intelligent electricity meter and design of new electronic meter reading device
3、Complete the codes and standards of CPU card.
4、Complete the codes and standards of secret key and card issuance system, demonstrate the feasibility of the design, and complete the process design of demand analysis, outline design, detailed design and software core functions (secret key distribution and download functions).
5、Analyze deeply the security threat facing the agricultural irrigation secret key and card issuance system in the future.
本文分析了农排灌密钥和发卡系统的设计方式、系统整体架构和运行方式,对系统的安全性和可靠性做了详细的阐述,详细说明了该系统的功能设计、工作流程设计、界面与视图设计等。文中也给出了系统发出的各种密钥卡、工具卡、用户卡的发行流程等工作细节。
本文设计的系统已经开发完成,在河北省农网排灌计量系统成功应用超过两年时间,并且被河南省电力公司农电工作部采用,在河南农网排灌计量系统中使用超过一年时间。
作者主要进行了如下几个方面的工作：
1、完成了河北省农排收费系统及电表、电表卡、卡片密钥使用的现状分析,同项目组一起分析了河北省农排目前收费系统发展存在的问题,完成了河北省农排使用的智能C P U卡表发展的需求分析；
2、在详细了解需求之后,完成了河北省农排非接触C P U卡表方案设计、使用新方案后收费系统升级改造设计方案、密钥和发卡系统设计方案、新型使用非接触式C P U卡智能电表设计方案、新型电子抄表器设计方案；
3、完成C P U卡片规范编写；
4、完成密钥和发卡系统规范编写,论证了设计方案的可行性,并完成了软件系统的需求分析、概要设计、详细设计以及软件核心功能(密钥分散及下装功能)的流程设计工作；
5、深入地分析了农排密钥和发卡系统今后面临的安全威胁；
Agricultural irrigation and drainage measurement and management system is an integrated information system to carry on electronic and information management to the main business of IC card and electricity meter using in irrigation power consumption based on the modern computer network communication technology, which is the technology basis and important guarantee of "every well is electrified and every family has the card". Secret key system and card issuance system is the core part of the agricultural irrigation and drainage management system, the development of which ensures the smooth and safe operation of the whole agricultural irrigation and drainage system.
This article analyzes the design approach, system overall architecture and operation method of the secret key and card issuance system for agricultural irrigation and drainage, elaborates the system safety and reliability in detail, and explains the functional design, workflow design, interface and view design, and so on. The article also demonstrates the working detail of the issuance process of the various secret key card, tool card and user card issued from the system.
The system developed by this article has already been completed, which has been applied successfully by the Hebei Province agricultural irrigation and drainage measurement system for more than two years, and adopted by the agricultural department of Electric Power Company of Henan Province to use in the Henan agricultural irrigation and drainage measurement system for more than one year.
The author mainly carried out the following aspects of work:
1、Complete the status analysis of Hebei province agricultural charging system and its electricity meter, electricity meter card and card secret key application, analyze the problems in the development of current charging system together with the project team and complete the demand analysis of intelligent CPU card meter using by the Hebei province agricultural irrigation.
2、After understanding the detailed requirements, the author complete the conceptual design of non-contact CPU card meter of Hebei Province agricultural irrigation and drainage, upgrading design of the new charging system, design of secret key and card issuance system, design of new non-contact CPU card intelligent electricity meter and design of new electronic meter reading device
3、Complete the codes and standards of CPU card.
4、Complete the codes and standards of secret key and card issuance system, demonstrate the feasibility of the design, and complete the process design of demand analysis, outline design, detailed design and software core functions (secret key distribution and download functions).
5、Analyze deeply the security threat facing the agricultural irrigation secret key and card issuance system in the future.
引文
[1]李国新密码技术在智能卡中的应用[M]北京：《计算机工程与应用》 2000年3月.
[2]粟翠兰密钥管理系统的设计与实现研究[M]北京：机械工业出版社 2003年.
[3]Bruce Schneier,吴世忠,祝世雄,张文政等编译应用密码学[[M]北京：机械工业出版社2000年4月.
[4]Wolfgang Rankl, Wolfgang Offing,王卓人,王锋译智能卡大全(M]北京：电子工业出版社2002年.
[5]A Shamir How to Share a Secret [J].Communications of the ACM 1979年24(11), P612-P613.
[6]GRBlakley Safeguarding Cryptographic Keys[C] In:Proceedings of the National Computer Conference;AmericanFederation of Information Processing Societies,1979年,48,P313-P317.
[7]吴文玲分组密码工作模式的研究现状[J]计算机学2006,29(1)：P21-P36.
[8]William Stallings,杨明等译密码编码学与网络安全：原理与实践(第二版)[M],北京：人民邮电出版社2000年6月.
[9]《中国金融集成电路(IC)卡规范》Yunfei Wu Architecture Design for Security Processing[M].Delft University of Technology, June,2004.
[10](美]Raghu Ramakrishnan, Johannes Gehrke著,周立柱,张志强等译.数据库管理系统原理与设计(M].北京：清华大学出版社,2004.
[11]潘晓雷,李文璞密码技术在IC卡的应用模式现代电子技术2001年第6期：P25-P27.
[12]段斌智能卡安全报文功能在网络认证和通信中的应用(J]计算技术与自动化2000年12月：P15-P21.
[13]王爱英智能卡技术—IC卡,清华大学出版社,2001年.
[14]卢开澄计算机密码学(M],清华大学出版社,1990年.
[15]Scott B. Gothery&Timothy M. Jurgensen著,邵建平等译,智能卡开发者指南电子工业出版社,2000年.
[16]卿斯汉密码学与计算机网络安全(M],清华大学出版社,2001年.
[17]邱仲潘密码学与网络安全[M],清华大学出版社,2005年.
[2]粟翠兰密钥管理系统的设计与实现研究[M]北京：机械工业出版社 2003年.
[3]Bruce Schneier,吴世忠,祝世雄,张文政等编译应用密码学[[M]北京：机械工业出版社2000年4月.
[4]Wolfgang Rankl, Wolfgang Offing,王卓人,王锋译智能卡大全(M]北京：电子工业出版社2002年.
[5]A Shamir How to Share a Secret [J].Communications of the ACM 1979年24(11), P612-P613.
[6]GRBlakley Safeguarding Cryptographic Keys[C] In:Proceedings of the National Computer Conference;AmericanFederation of Information Processing Societies,1979年,48,P313-P317.
[7]吴文玲分组密码工作模式的研究现状[J]计算机学2006,29(1)：P21-P36.
[8]William Stallings,杨明等译密码编码学与网络安全：原理与实践(第二版)[M],北京：人民邮电出版社2000年6月.
[9]《中国金融集成电路(IC)卡规范》Yunfei Wu Architecture Design for Security Processing[M].Delft University of Technology, June,2004.
[10](美]Raghu Ramakrishnan, Johannes Gehrke著,周立柱,张志强等译.数据库管理系统原理与设计(M].北京：清华大学出版社,2004.
[11]潘晓雷,李文璞密码技术在IC卡的应用模式现代电子技术2001年第6期：P25-P27.
[12]段斌智能卡安全报文功能在网络认证和通信中的应用(J]计算技术与自动化2000年12月：P15-P21.
[13]王爱英智能卡技术—IC卡,清华大学出版社,2001年.
[14]卢开澄计算机密码学(M],清华大学出版社,1990年.
[15]Scott B. Gothery&Timothy M. Jurgensen著,邵建平等译,智能卡开发者指南电子工业出版社,2000年.
[16]卿斯汉密码学与计算机网络安全(M],清华大学出版社,2001年.
[17]邱仲潘密码学与网络安全[M],清华大学出版社,2005年.