USB密码钥匙漏洞分析及防御策略的研究

随着我国网络银行业务的不断普及,网络上的金融犯罪也日益猖獗.因此,以PKI系统为基础的安全身份认证体系也在逐步得到广泛的关注.PKI系统的一个关键安全因素是私钥的保密,但用于存储证书和私钥的USB密码钥匙仍然存在着安全漏洞,使得系统很可能成为木马攻击的对象.首先分析了基于USB密码钥匙的PKI系统的工作原理及其存在的安全漏洞,其次针对这些漏洞提出切实可行的防御策略.

Analysis of USB Key's Vulnerability and Research of Defense Strategy

Recently,along with the development of e-Bank business,more and more financial crime arises.So the security Identity authentication system based on PKI is becoming wide attention.The key of PKI system is security of private key.While the USB Key used to store certification and private key still has vulnerabilities in security,which makes the system tend to be attacked by Troy horse.This paper first analyzes the principle of USB Key base PKI system and its security vulnerability,and then provides some efficient defense strategies against the attacks.