基于java智能卡的可信认证的设计与实现.pdf

中文摘要

伴随着信息时代的快速发展，智能卡已经完全融入了人们的生活之中，并在
多个领域中被广泛应用。Java 智能卡以其软硬件开发容易、周期短、平台无关性、
一卡多用等突出特点超越普通智能卡，成为当前智能卡领域的研究热点。可信计
算作为信息安全中极为重要的一部分，将安全防范手段由传统的被动防御调整为
主动，增强了通用计算平台的可信任性。课题尝试性地将可信计算思想引入智能
卡，在智能卡中建立可信环境。
本文会对于 Java 智能卡技术与可信计算技术分别进行详细的分析，针对可信
计算模块中没有对称密码算法的特点，将 AES 对称密码算法引入 Java 智能卡的可
信计算平台中，并根据 Java 智能卡的硬件要求，将 AES 算法中的列混淆运算进行
优化，并将原算法中加密过程的四步骤优化成为查表实现，以提高算法的时效性。
同时会对明文的加密时间与加密速度进行测试与比较，证明优化算法在运行时间
上的优势。最后本文会针对加入 AES 算法的 Java 智能卡可信平台进行认证机制的
设计，通过仿真器加以实现，并对该认证过程进行系统测试，证明该设计的可行
性。

关键词： Java 智能卡；可信平台；AES 加密算法；认证机制
-I-
Abstract

With the rapid development of the information, the smart cards have been
integrated into our daily life, and widely used in many fields. Java cards, who has the
advantage of easy implementation, short cycle, platform-independent and
multi-application, originated from smart cards and have move beyond the smart cards. It
is becoming an issue in research now. As an important part of information security, the
safety defense style has been changed from initiative to passive by Trusted Computing.
The reliability of computing platform has been increased. With the purpose of
establishing the reliability environment in Java Card, the subject integrated the Trusted
Computing with Java Card tentatively.
This article analyzes the technology of Java Card and Trusted Computing in detail.
Aiming at the weakness of TPM who is lack of the symmetric cryptographic algorithm,
the paper is trying to draw the AES algorithm into the platform. In consideration of
hardware requirement of Java Card, the optimal design of MixColumns in AES
cryptographic algorithm is improved, which can enhance the effectiveness of the
algorithm. It is clear that Optimization algorithm has advantages for operating speed by
comparing the encryption time and encryption speed of pla