【作者】 张秀芹；

【导师】 王淑营；

【作者基本信息】 西南交通大学 ， 计算机软件与理论， 2012， 硕士

【摘要】 汽车产业链协同商务平台为企业间业务协同提供了一种基于SaaS(软件即服务)模式的公共服务平台解决方案,它是一种在较高层次上对各种产业链企业间业务系统的抽象,其研究目标是为产业链企业间业务协同提供一个支持快速开发和定制的底层平台。作为企业间业务协同的数据中转中心,平台的数据交换系统是实现业务协同的关键组成部分。目前,汽车产业链协同商务平台的数据交换系统基于Web Service技术,实现了平台与制造厂系统间的动态数据交换。作为运行于Internet的公共服务平台,数据传输的安全性非常重要,目前平台的数据交换方案存在Web服务接口向外暴露、SOAP消息明码传输、数据交换效率低等问题。如何实现有效的访问控制；如何对服务请求者身份进行验证；如何确保数据在信息交互中的安全性；如何确保数据交换系统性能；提升交换效率等一系列的问题都需要考虑。本文在既有的基于Web Service和数据交换适配器的数据交换系统解决方案的基础上,深入分析了平台数据交换的特点,综合考虑了各种安全及性能隐患,针对汽车产业链协同商务平台数据交换频繁、数据传输过程中对安全性要求高的需求,提出了面向汽车产业链协同商务平台的数据安全交换模型。通过对基于加密锁的身份认证技术、基于SOAP扩展的数据传输安全技术、基于Web Service数据交换技术、压缩技术进行研究,本文基于.NET平台完成了该模型的总体设计及实现。通过模拟Internet运营环境下的各种攻击测试表明,该安全解决方案能解决平台在数据传输过程中的安全隐患问题。更多还原

【Abstract】 The automotive industry chain collaborative commerce platform provides a public service platform solution based on the SaaS(Software-as-a-Service) model for Inter-enterprise business collaboration, It is an abstract of a variety of industrial chain of inter-enterprise business systems at a higher level, and it’s goal is to provide a underlying platform supporting rapid development and customization for industrial chain of inter-enterprise business collaboration. As the data transit center of inter-enterprise business collaboration, platform data exchange system is a key component of business collaboration. The data exchange system of automotive industry chain collaborative commerce platform has achieved dynamic data exchange between the platform and the factory system based on Web Service technology currently.As a public service platform running on the Internet, data transmission security is very important, but there are problems such as outside exposure of Web Services interfaces, unencrypted transmission of the SOAP message, and low efficiency of data exchange to be solved in platform data exchange program. How to achieve effective access control, verify the service requester identity, ensure the security of data during transmission, ensure the performance of data exchange system, enhance exchange efficiency and other series of problems should be solved.The features of platform for data exchange is analyzed in depth, all kinds of safety and performance risks are taken into consideration, data security exchange model for the automotive industry chain collaborative commerce platform is proposed in order to meet frequent data exchange of collaborative business platform for the automotive industry chain and high requirements of security during the data transmission. Data security exchange model facing the automotive industry chain collaborative commerce platform is presented in this thesis on the basis of existing data exchange system based on Web Service and data exchange adapter. Overall design and implementation of the model is achieved by studying authentication based on encryption lock, data transmission security based on SOAP extension, data exchange technology and compression technology based on Web Service. Safety problems in the data transfer process are solved in the security solution, and it has been validated in the test under the simulated Internet operating environment.更多还原