基于PKI的办公自动化网络信息安全研究

【作者】 陈雨婕；

【导师】 华继学；

【作者基本信息】 华东师范大学 ， 软件工程， 2008， 硕士

【摘要】 随着计算机网络技术和通信技术在电子政务、电子商务的广泛应用,办公自动化为企业或政府的管理和决策提供了科学的依据。但是信息安全保密问题也时刻令人担忧,办公自动化系统作为信息网络的一个特殊应用领域,运行着大量需要保护的数据和信息,有其自身的特殊性,如果系统的安全性被破坏,造成敏感信息暴露或丢失,或网络被攻击等安全事件,可能导致严重的后果。如何保证办公自动化系统在网络环境下数据信息传输的及时性、完整性、机密性和不可否认性,已成为当前网络信息安全领域内研究的主要课题,基于公开密钥密码理论和技术建立起来的PKI较好地为解决这一问题提供了保障。PKI技术采用证书管理公钥,通过认证中心CA,解决了网络中密钥管理和身份认证问题,并实现了数据的加/解密和鉴别,保证了网络安全的可靠实现。论文通过对PKI相关理论和技术的研究,创新性地将PKI技术应用于办公自动化网络,设计并实现了一个具有较高安全性、通用性和可扩展性的密码服务系统。该系统能根据PKCS标准发放和管理证书、产生和管理密钥,并为用户提供PKI服务。主要贡献如下:(1)分析了办公自动化系统中存在的安全问题,详细论述了办公自动化系统与网络安全、密码技术与网络信息安全之间的关系,提出了办公自动化信息安全有效的解决方案;(2)深入研究和讨论了所涉及的密码理论相关知识及PKI的相关理论和体系结构,对CryptoAPI和CDSA进行了研究和总结。提出了基于PKI/CA环境的OA系统设计原则,并在考虑办公自动化网络的特殊性基础之上,根据实际网络中的运行需求,设计了一个基于PKI/CA机制的安全服务体系结构;(3)根据系统的需求,在提出的安全服务解决方案和安全服务体系结构的基础之上设计了一个密码服务器,主要包括:公共安全接口PSI、管理调度单元、实时监控和日志单元、密码服务单元,并详细介绍了其核心部分密码服务单元各模块的实现过程;(4)在实验室条件下对密码服务单元进行了仿真测试,测试结果满足理论要求。更多还原

【Abstract】 With the widespread application of the computer network technology and the communication technology in the electronic government affairs and the electronic commerce, Office automation have provided the science basis for the enterprise or government’s management and the decision-making. But we are anxious to the information security, as the special application domain in the information network, the office automation system is moving the data and the information which massive needs to protect. It has its own particularity. If the system security is destroyed and creates the sensitive information exposition or loses, or the network is attacked and so on, it possibly causes the serious consequence. How to guarantee timeliness, the integrity, the confidentiality and undeniable of the office automation systems to transmit data message under the network environment has become the main topic in the current network information security domain. PKI which based on the public key password theory and the technology provides the safeguard well to solve this problem.Using the certificate management public key, through authentication center CA, the PKI technology has solved the key management and the status authentication in the network, and has realized the data Canadian/decipher and the distinction, and has guaranteed the network security reliable realization.Through the research on PKI theories and the technical, the paper innovatively applies the PKI technology to the office automation network and designes and realizes password service systemwhich has the high security, the versatility and the extendibility. According to the PKCS standard, this system can provide and manage certificate, produce and manage the key, and provides the PKI service for the user. The main contribution is as follows:(1)The thesis has analyzed the security problem which exists in the office automation system, elaborated the relations among the office automation system and the network security, the password technology and the network information security relations in detail, and proposed the effective solution to the office automation information security.(2)The thesis thoroughly studied and discussed the password theory knowledge and the PKI theories and the architecture, and researched and the summarized the Crypto API and CDSA. and proposed design principle of OA system based on PKI/CA the environment, and on considering particular foundation of the office automation network, according to the network demand in movement, has designed a safe service architecture based on the PKI/CA mechanism.(3)According to the system demand, based on the safe service solution plan and the safe service architecture which proposed, it has designed a password service including: Public interface PSI, scheduling management unit, real-time monitoring and log unit, the password service unit, and details of the core of the password server ,password service unit in the process of the realization of the modules.(4)It carried on the simulation test to the system under the laboratory condition and the test result has satisfied the theory request.更多还原