結合IC卡之校園安全網頁系統的設計與實現

Size: px

Start display at page:

Download "結合IC卡之校園安全網頁系統的設計與實現"

味拜骆
9 years ago
Views:

1 IC 立立路料料 (Secure Campus-wide Website System) 料料來理 IC 識料不漏料料兩零 Windows 便更類 IC 讀 RSA AES 料 IC WWW AES RSA PHP 1. 例 1 利漏洞易易料都理易不類路數 (World Wide Web, WWW) Web-based 率

2 來易路利料離來料理 (DBMS Database Managerment System) 金來金料理 IC 來 2 -- 料理來金來讀 ( 金料 ) 來了理來理不料 IC 來利 IC 數 2. ( ) 路路理理漏洞數念立更易不 ( ) 路易量 (1) 料 (2) 便不 (3) (4) ( ) 量行更 2.1 (HyperText Transfer Protocol, HTTP) 利路易 SSL(Secure Sockets Layer) 利

3 讀 HTTP 都料 2.2 IC 來利利來 ID IC 識率料立識來 IC 了 IC 讀不便 ( ) ( IC 理 IC ) 路料不 ( ) (Server-side Webpage Language) 料料 ( ) 行金料見 Perl, PHP, ASP, JSP DBMS Oracle, Sybase, MS-SQL, MySQL, PostgreSQL 行良 2.4 數行 Unix-like Windows 來來省來便理量省來 :Apache PHP MySQL OpenSSL

4 行行行 IC IC 易暴力 IC IC HTTP / HTTPS HTTP 料料 HTTP 若料數若料不 3. (3-tier model) 來料 ( ) 料金料 (Key Database) 料 (Content Database) 料 (User Database) 金料錄金 (encryption key) 料來料識料金 Web Server 理 Web Server 來金理 IC 行料立金

5 利 IC 立料讀不論理來料 4. 不路良料良度金 (Secret-key cryptosystem) 金 (Public-key cryptosystem) 兩 4 金 Rijndael ---AES(Advanced Encryption Standard) 5 金 RSA 6 兩都了了 SHA 來料金見 MD5 SHA-1 來度金 AES(Rjindael) 128 bit 料料金 RSA 1024 bit 金 SHA bit 5.IC IC Simems SLE 4428 量 1 KB 料金 6. 行流 IC 行 ( 理 ) 料料行流說 6.1 IC 理立理料亂數識 (ID)(8 bytes Server ) RSA 金 (key pair) 料 IC ( 金金 ) 料識金

6 料料料料 6.2 料流流亂數金 (session key) server 識 (session ID) 料利讀讀 IC 識 (user ID) Server 料 session key (AES ) 料 session key SHA-256 id id 金料識料 session key 料料亂數 128 bits AES 金金料利金金料 ( 金料料連金欄金欄欄行料 ) 6.3

7 流料流行料讀讀讀 IC 識識連料料金連讀 IC 金金利金 ( ) 7. 料理料了理數 Windows 便說 7.1 料了 Apache 8 PHP 9 MySQL 10 ] OpenSSL 11 Linux 良都 PHP Rijndael(AES) Libmcrypt 12 了了 Turck MMCache for PHP 13 不 PHP 行率

8 Apache PHP 料 (DBMS) MySQL 金 OpenSSL 0.9.x RSA AES Libmcrypt [ ] Turck MMCache 理 Borland C++ Builder 6.0 金 RSA AES IC OpenSSL 0.9.x TSM Rijndael (AES) Component IC 讀 (EZ100PU) API 7.2 理數 Windows IC 讀 Windows 理 Windows Borland C++ Builder 6.0 API IC 7.3 料料連料料料金料料欄 ( ) 料欄料金料料識 (ID) 料金 ( ) ( ) 金 ( ) 金 ( ) ( ) 讀 ( + 金 + ) 金 7.4 行六讀 IC 讀若 IC 讀 ( ) 讀若 ( ) ( ) 六行 (IC )

9 行 ( 料 ) 8. 行 ( 料 ) 8.1 HTTP (header) (body) 兩來錄良 HTTP 金 HTML (tag) BASE64 復 HTML HTTP 良良 8.2 (1) 料料都金 RSA IC 讀 RSA 金讀

10 (2) 漏洞漏洞了料更了料了料料金了金料 ( 都 AES 金 ) 率 (3) HTTP 不讀 (4) IC IC 數 ( IC ) IC 勞率 9. 論利 HTTP 路了料不料不 ( ) 路來量了 (RSA AES) IC 不零更易理 PHP ( IIS) 料 ( Oracle, MS-SQL, Sybase ) 理讀 API 易讀 IC 兩 (1) 料路來路連 IP (2) 更 PKI(Public Key Infrastructure) (smart card) RSA 金行金 IC 陸行了 IC 料 ( 識金 ) IC 便

11 更更 10. 參 1. IPA (IPA/ISEC) 2. IC 理論 1999 年 6 pp 葉 2000 年北 4. William Stallings, Cryptography and Network Security: Principles and Practice, 2nd edition, Prentice-Hall, Inc National Institude of Standards and Technology, Advanced Encryption Standard(AES), Federal Information Processing Standard, FIPS PUB 197, November 26, R. L. Rivest, A. Shamir, and L. Adleman, A Method for Obtaining Digital Signatures and Public-Key Cryptosystems, Communications of the ACM,Feb. 1978, Vol. 21, No. 2, pp ; Cryptographic Communications System and Method, U.S. Patend #4, 405, 829, Sep SHA Apache 9. PHP MySQL OpenSSL Libmcrypt Turck MMCache for PHP 劉良 ( ) IPSec-VPN 2002 年羅北 15. 龍 Linux AES SHA-256 VPN 理 2002 年 5 pp