本文提出了一种面向网上政府采购的安全采购项目备案的协议.该协议运用了以数字证书为核心的PKI技术,实现了用户的身份认证和访问控制,保证了整个采购项目的备案过程中数据的保密性、完整性和不可抵赖性.并通过一种形式分析模型BAN逻辑证明了该协议的安全性.实验证明该方法可以解决网上政府采购中采购项目备案服务对安全性的需求.
Proposed a secure procurement record protocol for e-Government. With PKI technology based on digital certificate, the system implemented user authentication and access control, ensured the integrity, non-repudiation and security of information in the procurement record process. The protocol is proved security by BAN logic, experiments shows that the method could solve security problem in record service.