为确保电子航海图在传输过程中的安全性和完整性,提出一种基于现代加密技术、数字签名、数字证书技术的电子海图数据保护方案。方案在数据提供商、设备制造商和数据用户三方相互鉴别、相互认证的条件下实施,通过用户权证文件和海图单元权证文件来鉴别用户身份和传递密钥,并给出了用户权证文件和海图单元权证文件的数据格式。ENC数据由数据提供商进行加密和签名,在用户端采用DSA作为签名验证算法,利用CRC32、Blowfish和ZIP算法设计了完整性验证、解密及解压缩流程,最后给出了算法中重要参数的具体值。应用结果表明,该方案能有效保护电子海图数据在分布和使用中的安全性和完整性。
To ensure the security and integrity of ENC (Electronic Navigational Chart) in transmission, a data protection scheme is designed applied computer technology and modern cryptography such as encryption technology, digital signatures and digital certificate technology. The scheme relates to data servers, manufacturers and data clients. Between these a user permit file and a cell permit file are proposed to implement authentication and verification of ENCs. The mandatory format and field lengths of the two files is defined. Data servers encrypt and sign ENCs. Base on DSA, CRC32, Blowfish and ZIP algorithms a complete process is described to check integrity , decrypt and uncornpress ENC information. The key parameters of the process are specified.