密钥管理模块的设计是任何一个安全系统设计时必须首先解决的一个难题。从密钥管理最重要的方面入手,讨论了密钥的管理,并在重点分析密钥产生、分配、验证、替换四个重点环节的基础上,提出了一种数据库加密系统密钥管理模块的设计和实现方案。经多次实验证明,由于密钥的分配和验证是基于模运算的,而模运算速度是很快的,所以基于该设计方案实现的密钥管理模块是安全、可行和高效的。
When a security system is designed, the design of key-managing module is a very difficult problem and must be solved firstly. This paper proposes a scheme of design and implementation of key-managing module of database encryption system in detail, based on analysis of such aspects as creating keys, distributing keys, verifying keys, replacing keys, etc. The presented results show that the key-managing module built by the scheme is secure, feasible, and efficient.