[1]许勇,吴国新,顾冠群.因特网EDI的安全研究及实现[J].东南大学学报(自然科学版),2002,32(1):1-5.[doi:10.3969/j.issn.1001-0505.2002.01.001]
 Xu Yong,Wu Guoxin,Gu Guanqun.Research and implementation on the security of Internet EDI[J].Journal of Southeast University (Natural Science Edition),2002,32(1):1-5.[doi:10.3969/j.issn.1001-0505.2002.01.001]
点击复制

因特网EDI的安全研究及实现()
分享到:

《东南大学学报(自然科学版)》[ISSN:1001-0505/CN:32-1178/N]

卷:
32
期数:
2002年第1期
页码:
1-5
栏目:
计算机科学与工程
出版日期:
2002-01-20

文章信息/Info

Title:
Research and implementation on the security of Internet EDI
作者:
许勇 吴国新 顾冠群
东南大学计算机科学与工程系国家教育部计算机网络和信息集成支撑技术重点实验室, 南京 210096
Author(s):
Xu Yong Wu Guoxin Gu Guanqun
The Education Ministry Key Lab of Computer Network and Information Integration, Department of Computer Science and Engineering, Southeast University, Nanjing 210096, China
关键词:
因特网 EDI EDI 中心 安全机制 MIME PGP
Keywords:
Internet EDI EDI center security policy MIME PGP
分类号:
TP393
DOI:
10.3969/j.issn.1001-0505.2002.01.001
摘要:
为解决EDI报文传输的安全和贸易双方的身份认证以及其他相关问题,在分析利用因特网传输EDI报文可能产生的安全问题的基础上,结合现有标准,给出了利用PGP算法实现EDI报文传输的安全性需求,使用因特网多功能邮件扩展协议实现传输的具体方法,并加以实现.系统具有多种可选的、密钥长度可变的标准加密算法,实现EDI系统所要求的安全性、完整性、可认证性以及审计性等功能.
Abstract:
To solve the security problem of transmission of EDI messages, authentication of trade partners and other correlative ones, this paper analyzes the possibility of security problem in transmitting EDI documents on Internet. Combining with the standards of Internet EDI, a solution is presented and an Internet EDI system is implemented. In the system, the PGP method and the Internet MIME protocol are used to satisfy the needs of security transmission of EDI message. The system has several alternative and variable-key-length standard encrypted methods, and has many other functions of security, integrality, authentication and audit, etc.

参考文献/References:

[1] Chuck Shih.Requirements for inter-operable internet EDI.Internet Draft.EDIINT Working Group,November 1998.
[2] 吴国新,吉逸.EDI技术研究及其实现[J].计算机研究与发展,1998,35(2):108-113.
  Wu Guoxin,Ji Yi.Research and implementation of EDI [J].J of Computer Research and Development, 1998,35(2):108-113.
[3] Lai X,Massey J.A proposal for a new block encryption standard [A].In:Advances Cryptology — EUROCRYPT’90 Proceeding [C].Springer-Verlag,1991.389-404.
[4] Lai X,Massey J.Hash functions based on block ciphers [A].In:Advances Cryptology—EUROCRYPT’92 Proceeding [C].Springer-Verlag,1992.55-70.
[5] ITU-T.Information technology-open systems interconnection-the directory:authentication framework ITU-T recommendation X.509.Febrary 1994.
[6] Borenstein N,Freed N.Multipurpose internet mail extensions(MIME)part one:mechanisms for specifying and describing the format of internet message bodies,RFC2045.Network Working Group,November 1996.
[7] Borenstein N,Freed N.Multipurpose internet mail extensions(MIME)part two:media types,RFC2046.Network Working Group,November 1996.
[8] Moore K.MIME(multipurpose internet mail extensions),part three:message header extensions for Non-ASCII text,RFC2047.Network Working Group,November 1996.
[9] Freed N,Klensin J,Postel J.Multipurpose internet mail extensions(MIME),part four:registration procedures,RFC2048.Network Working Group,November 1996.
[10] Freed N,Borenstein N.Multipurpose internet mail extensions(MIME),part five:conformance criteria and examples,RFC2049.Network Working Group,November 1996.
[11] Crocker D.MIME encapsulation of EDI objects,RFC1767.March 1995
[12] Crocker.Security multiparts for MIME:multipart/signed and multipart/encrypted,RFC1847.Network Working Group,October 1995.
[13] Dusse S,Hoffman P,Ramsdell B,et al.S/MIME Version 2 message specification,RFC2311.Network Working Group,March 1998.
[14] Dusse S,Hoffman P,Ramsdell B,et al.S/MIME version 2 certificate handling,RFC2312.Network Working Group,March 1998.
[15] Freed N. Gateways and MIME security multiparts,RFC2480.Network Working Group,January 1999.
[16] Elkins,MIME security with pretty good privacy(PGP),RFC2015.Network Working Group,October 1996.
[17] Callas J,Finney H,Thayer R.OpenPGP message format,RFC2440.Network Working Group,November 1998.

备注/Memo

备注/Memo:
基金项目: 江苏省“九五”重大科技攻关资助项目(BG96002-2).
作者简介: 许勇(1966—),男,博士生; 顾冠群(联系人),男,教授,博士生导师,中国工程院院士.
更新日期/Last Update: 2002-01-20