电子邮件系统普遍存在安全措施不健全、邮件明文传输和存储、极易被截获或破解.提出一种基于公钥基础设施和SM9密码算法的安全电子邮件方案,它结合SM9和公钥密码体制的各自优势,克服SM9算法中密钥分发安全性弱及PKI无法支持云模式等问题.通过安全性分析,该方法可有效解决电子邮件中的强身份认证、传输与存储安全,提升邮件系统安全性,也有利于进一步规范电子政务诚信体系和安全体系.%E-mail system generally exists not perfect in security measures, mail plaintext transmission and storage and easy to be intercepted or cracked.This paper proposes a secure e-mail scheme based on PKI and SM9, which combines the advantages of SM9 and public key cryptosystem to overcome the weak security of key distribution in SM9 and PKI cannot support cloud model.Through security analysis, this method can effectively solve the strong identity authentication, transmission and storage security in e-mail, enhance the security of e-mail system, and also help to further standardize the e-government credibility system and security system.
展开▼
