大型物流信息系统中安全认证子系统的设计与实现

【作者】 谢娟；

【导师】 施荣华； 邵治龙；

【作者基本信息】 中南大学 ， 计算机技术， 2006， 硕士

【摘要】 电子商务时代，由于企业销售范围的扩大，促使了物流行业的兴起，电子商务需要强大的现代化物流体系作支撑，而信息系统的建设和应用是物流现代化的主要内容。在物流信息系统的建设中，很重要的一点便是要在安全策略上保护好系统的帐务清分与结算、支付网关、敏感数据的存储安全；信息在网络传输过程中的安全以及特殊物流客户的信息资料的安全等。CA认证技术作为一种极具前瞻性和收益性的新技术，具有网上信息加密、解密和数字签名等功能，通过它来保证电子商务、电子政务活动的安全是必由之路。本文首先详细论述了在大型物流信息系统建设的多个环节中，如业务受理、存储、配送、运输、费用、客户管理等方面有强烈的安全认证需求，接着深入探讨了现代密码学的基本原理，为安全认证子系统的设计提供了理论依据；然后对三种不同的认证系统作了比较，并针对本文的大型物流信息系统特点选择了CPCA认证系统；最后是安全认证子系统的具体设计与实现。本文是以广东邮政开发的《电子商务物流管理与动态调配系统》为背景，利用CPCA认证功能在邮政物流信息系统的各功能模块中作身份认证、数据加密传输、权限管理、密钥管理、数字证书的管理、安全维护及其它方面的有效应用。更多还原

【Abstract】 In the age of e-business, the expansion of the trade scope of the enterprise causes the boom of the logistics, which supports the development of e-business. Yet the construction and application of the information system is the main content of modern logistics. In the construction of logistics information system, it is essential to guarantee the security of such system information as sorting and settlement of account, payment netgate, and the storage of important data, as well as the security of transmission of the important client information. CA certification, which is of prospect and profit, has such functions as online information encryption, decryption and digital signature and the employment of CA certification is compulsory for the security of e-business.In this article there is a discussion of the demand of security certification in the different phases of construction of large-scale logistics information system, such as acceptance of business, storage, allocation, transportation, expense, clients management; then, it is the discussion of the basic principles of modern cryptography, which is the theoretic bases of subsystem of security certification; and then, according to the comparison of three different certification systems, it shows the preference of CPCA certification system in terms of characteristics of large-scale logistics information system concerned; finally, it is the design and actualization of the security certification subsystem. Based on the management and dynamic allocation system of e-business logistics developed for Guangdong Postal Service, this research is about the application of identity certification, transmission of encrypted data, management of privilege and password, management of digital signature and security maintenance through the employment of CPCA.更多还原