【摘要】：隨著金融電子化的發(fā)展,金融系統(tǒng)對(duì)安全性的要求越來(lái)越高,傳統(tǒng)的磁條卡安全性低,容易被復(fù)制等缺陷越顯突出,特別是自動(dòng)取款機(jī)的普及,出現(xiàn)大量因?yàn)橥蹬拿艽a,刷卡門(mén)禁導(dǎo)致的磁條卡被復(fù)制資金被盜事件也引起社會(huì)的強(qiáng)烈關(guān)注,因此安全性更高,交易和維護(hù)成本更低的金融IC卡也被越來(lái)越多的銀行接受并推廣使用。金融IC卡的安全性是它被重視和推廣的原因之一,所以金融IC卡的安全性設(shè)計(jì)成為了新的研究課題。本文從商業(yè)銀行實(shí)際工作需求出發(fā),系統(tǒng)的進(jìn)行了可行性研究、需求分析、設(shè)計(jì)和實(shí)現(xiàn)、業(yè)務(wù)功能測(cè)試,工作重點(diǎn)從密鑰的生成,制卡數(shù)據(jù)的加密,密鑰的保存,密鑰的使用獲取等方面著手,務(wù)求建立高效、安全、標(biāo)準(zhǔn)、實(shí)用的金融IC卡—數(shù)據(jù)安全子系統(tǒng)。前期準(zhǔn)備階段查閱了大量的文獻(xiàn)資料,并對(duì)國(guó)內(nèi)外最新的研究成果進(jìn)行了仔細(xì)了解。需求分析階段進(jìn)行了充分的業(yè)務(wù)需求收集和分析,與行方業(yè)務(wù)人員共同完成了可行性分析報(bào)告和軟件需求規(guī)格說(shuō)明書(shū),并通過(guò)行里業(yè)務(wù)部門(mén)的嚴(yán)格評(píng)審。設(shè)計(jì)開(kāi)發(fā)階段嚴(yán)格遵循公司設(shè)計(jì)準(zhǔn)則和開(kāi)發(fā)規(guī)范。測(cè)試階段編寫(xiě)了2000多個(gè)測(cè)試用例,進(jìn)行了3輪完整的功能測(cè)試。系統(tǒng)的最大特色是服務(wù)的插件化和標(biāo)準(zhǔn)化,這是系統(tǒng)設(shè)計(jì)階段的重點(diǎn)工作,也是我們的設(shè)計(jì)原則。在服務(wù)插件化和標(biāo)準(zhǔn)化設(shè)計(jì)原則下建立的金融IC卡—數(shù)據(jù)安全子系統(tǒng),基于統(tǒng)一規(guī)劃、統(tǒng)一管理,以確保整個(gè)系統(tǒng)的各種軟件、硬件均符合相關(guān)的國(guó)際標(biāo)準(zhǔn)、國(guó)內(nèi)標(biāo)準(zhǔn),保證業(yè)務(wù)、功能的統(tǒng)一化和標(biāo)準(zhǔn)化,從而達(dá)到服務(wù)的規(guī)范化和管理的高效性。系統(tǒng)提供的加密功能完善,配置靈活,操作便捷。金融IC卡—數(shù)據(jù)安全子系統(tǒng)的加密標(biāo)準(zhǔn)采用PBOC3.0最新標(biāo)準(zhǔn),最大限度地滿足了西安銀行的金融需求(金融應(yīng)用)。在加密接口封裝方面,系統(tǒng)進(jìn)行了充分預(yù)留,為后期國(guó)密算法的擴(kuò)展提供了良好的擴(kuò)展支持。參考國(guó)際最新研究狀況,自有算法(例如:國(guó)密算法)是未來(lái)金融IC卡行業(yè)應(yīng)用發(fā)展的新趨勢(shì),后期可以進(jìn)行一步優(yōu)化升級(jí)數(shù)據(jù)安全子系統(tǒng)。商業(yè)銀行科技部門(mén)會(huì)在這個(gè)方向上不斷研究,擴(kuò)充加密功能,提高卡片數(shù)據(jù)的安全性,讓自身的產(chǎn)品更加具有競(jìng)爭(zhēng)力。
[Abstract]:With the development of electronic finance, the security requirement of the financial system becomes higher and higher. The traditional magnetic stripe card is low in security and easy to be copied. Especially, with the popularization of ATM, a large number of clandestine passwords appear. The theft of magnetic stripe cards caused by card swiping has also aroused strong concern in the society, so the security is higher and the financial IC cards with lower transaction and maintenance costs are accepted and promoted by more and more banks. The security of financial IC card is one of the reasons why it is paid attention to and promoted, so the security design of financial IC card has become a new research topic. In this paper, the feasibility research, requirements analysis, design and implementation of the system are carried out from the actual working requirements of commercial banks, and the key generation, business card printing data encryption, and key preservation are the key points of the work, the business function test, and the design and implementation of the system. In order to establish an efficient, secure, standard and practical financial IC card-data security subsystem. In the pre-preparation stage, a large number of literature materials were consulted, and the latest research results at home and abroad were carefully understood. In the phase of requirement analysis, the business requirements were collected and analyzed fully, and the feasibility analysis report and software requirement specification were completed together with the business staff of the bank, and passed the strict review of the business department in the industry. The design and development stage strictly follow the company design guidelines and development standards. In the test phase, more than 2000 test cases were written and 3 rounds of complete functional tests were carried out. The most important feature of the system is the plug-in and standardization of the service, which is the key work in the system design phase and our design principle. The financial IC card-data security subsystem established under the principles of service plug-in and standardized design is based on unified planning and unified management to ensure that all kinds of software and hardware of the whole system comply with relevant international and domestic standards. To ensure the unification and standardization of business and function, so as to achieve the standardization of service and the efficiency of management. The encryption function provided by the system is perfect, the configuration is flexible, and the operation is convenient. The encryption standard of financial IC card-data security subsystem adopts the latest standard of PBOC3.0, which satisfies the financial demand of Xi'an Bank to the maximum extent (financial application). In the encryption interface encapsulation, the system has been fully reserved, which provides a good extension support for the later expansion of the national security algorithm. Referring to the latest research situation in the world, self-contained algorithms (such as national security algorithm) are the new trend of the future financial IC card industry application, and one-step optimization and upgrading of the data security subsystem can be carried out in the later stage of the development of financial IC card industry. The technology department of commercial banks will continue to study in this direction, expand encryption function, improve the security of card data, and make their products more competitive.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2015
【分類號(hào)】：TN409;TP309

【參考文獻(xiàn)】

相關(guān)博士學(xué)位論文 前2條

1 韓立東;RSA與背包公鑰密碼算法的安全性分析[D];山東大學(xué);2010年

2 孔凡玉;公鑰密碼體制中的若干算法研究[D];山東大學(xué);2006年

相關(guān)碩士學(xué)位論文 前7條

1 王茜;基于JavaEE的人事考核管理系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[D];廈門(mén)大學(xué);2014年

2 楊丹;TaaS測(cè)試管理服務(wù)的研究與實(shí)現(xiàn)[D];西北大學(xué);2013年

3 韋振中;基于web的在線站群自動(dòng)化建設(shè)平臺(tái)分析與設(shè)計(jì)[D];云南大學(xué);2013年

4 劉雅麗;金融IC卡系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[D];電子科技大學(xué);2012年

5 梁小英;RSA快速實(shí)現(xiàn)算法的研究與改進(jìn)[D];北京郵電大學(xué);2010年

6 蔡曉虹;智能化專家抽取系統(tǒng)[D];西安電子科技大學(xué);2008年

7 李小朋;基于NFC技術(shù)的電子錢(qián)包系統(tǒng)設(shè)計(jì)與安全性研究[D];北京郵電大學(xué);2007年

，

本文編號(hào)：2446557