【摘要】：高速公路不停車收費(fèi)系統(tǒng)運(yùn)行中有大量敏感信息需要網(wǎng)絡(luò)傳輸，敏感信息的安全性決定了系統(tǒng)運(yùn)行的安全性和穩(wěn)定性。信息加密是保護(hù)信息安全的重要環(huán)節(jié)，也是實(shí)現(xiàn)網(wǎng)絡(luò)信息安全的核心技術(shù)。 密碼體制分為對(duì)稱密鑰密碼體制和公開密鑰密碼體制兩類，對(duì)稱密鑰密碼體制的加、解密密鑰是相同的，加密速度快；公開密鑰密碼體制則擁有公開密鑰和私有密鑰，加、解密過程不同。公開密鑰密碼體制雖然具有很多突出優(yōu)點(diǎn)，但其加、解密速度慢，如果對(duì)整個(gè)待傳輸報(bào)文進(jìn)行加、解密，不能滿足實(shí)際應(yīng)用需要。 AES加密算法的輪函數(shù)具有實(shí)現(xiàn)簡(jiǎn)單、加解密速度快，抗攻擊性好等優(yōu)點(diǎn)，，是一種較理想的對(duì)稱密鑰密碼算法；RSA加密算法是經(jīng)過長(zhǎng)期實(shí)踐檢驗(yàn)公認(rèn)比較安全的公開密鑰密碼算法。 因此，為了消除對(duì)稱密鑰加密算法的會(huì)話密鑰在網(wǎng)絡(luò)傳輸中的安全隱患，系統(tǒng)設(shè)計(jì)中采用了AES加密算法和RSA加密算法相結(jié)合的混合加密技術(shù)。 AES算法的N輪循環(huán)都使用代替和混淆并行地處理整個(gè)數(shù)據(jù)分組(包含以下四個(gè)變換：1、字節(jié)代替SubBytes，用一個(gè)S盒完成分組中的按字節(jié)的代替；2、行移位shiftrows，線性組合置換；3、列混淆MixColumns，利用存域GF(2~8)上的算術(shù)特性的代替；4、輪密鑰加AddRoundKey，循環(huán)密鑰同上層結(jié)果進(jìn)行異或運(yùn)算)；RSA算法是根據(jù)大整數(shù)因子分解困難性這一原理來設(shè)計(jì)的，利用單向陷門函數(shù)來實(shí)現(xiàn)信息加密(若用M表示明文，用C表示密文(M和C均小于n)，則加密和解密運(yùn)算為：加密式子C=M~emodn解密式子M=C~d modn)。 由于混沌信號(hào)具有良好隨機(jī)特性，非常適合用來生成密鑰，因此系統(tǒng)采用混沌迭代方程x_(n+1)=a×sin~2(x_n-b)(當(dāng)初始條件x_0稍微出現(xiàn)一些偏差Δx_0，則經(jīng)過n次迭代后，其偏差Δx_n則呈指數(shù)分離)來產(chǎn)生AES會(huì)話密鑰。 高速公路不停車收費(fèi)系統(tǒng)中網(wǎng)絡(luò)敏感信息的網(wǎng)絡(luò)傳輸及加密實(shí)現(xiàn)過程如下： 首先調(diào)用混沌迭代方程產(chǎn)生AES會(huì)話密鑰，利用用AES加密算法加密敏感信息，然后調(diào)用RSA加密算法加密AES會(huì)話密鑰并寫入前面加密的密文中，使信息整合在一起，接著調(diào)用壓縮模塊對(duì)全部加密信息進(jìn)行壓縮以節(jié)約網(wǎng)絡(luò)傳輸時(shí)間增加系統(tǒng)安全性，最后進(jìn)行網(wǎng)絡(luò)傳輸。
[Abstract]:There are a large number of sensitive information in the operation of expressway toll collection system that need to be transmitted by network. The security of sensitive information determines the security and stability of the system. Information encryption is not only an important link to protect information security, but also the core technology to realize network information security. The cryptography can be divided into two categories: symmetric key cryptography and public key cryptography. The encryption and decryption keys of symmetric key cryptography are the same, and the encryption speed is fast. Public key cryptography has public key and private key, and the process of encryption and decryption is different. Although the public key cryptosystem has many outstanding advantages, its encryption and decryption speed is slow. If the whole message to be transmitted is encrypted and decrypted, it can not meet the needs of practical application. The wheel function of AES encryption algorithm has the advantages of simple implementation, fast encryption and decryption speed, good anti-aggression and so on. It is an ideal symmetric key cryptography algorithm. RSA encryption algorithm is recognized as a secure public key cryptography algorithm after a long period of practice. Therefore, in order to eliminate the hidden danger of session key of symmetric key encryption algorithm in network transmission, the hybrid encryption technology of AES encryption algorithm and RSA encryption algorithm is adopted in the design of the system. The N-wheel loop of AES algorithm uses substitution and confusion to deal with the whole data packet in parallel (including the following four transformations: 1, bytes replace SubBytes, with a S-box to complete the replacement of bytes by bytes, 2, row shift shiftrows, linear combination replacement, 2) row shift shiftrows, linear combination replacement, 2) row shift shiftrows, linear combination replacement, 2) row shift shiftrows, linear combination replacement, 2) row shift shiftrows, linear combination substitution. 3, the column confusion MixColumns, is replaced by the arithmetic characteristics on the memory domain GF (2 鈮

本文編號(hào)：2480656