【作者】 李希阳；

【导师】 杨义先；

【作者基本信息】 北京邮电大学 ， 计算机技术（专业学位）， 2013， 硕士

【摘要】 随着越来越多的文档以数字的形式存储在电脑中,加上传统的电子文档具有易拷贝,使用不可控,泄密行为难以追踪等等一系列特性,企业的信息安全遭受到了严峻的考验。对于企业来说,仅仅依靠管理制度的完善不能从根本上解决内部文档泄密的问题,所以需要相关技术手段来防止文档泄密。数据加密技术能够保护企业重要文档数据,减少企业损失,但是传统的加解密需要手动进行,影响办公效率,而且对于文档使用的控制力度上显得不够。本课题的研究目的就是为了防止未经授权的用户查看和流转电子文档,因此提出了一种文档保护方案,即应用透明加解密对文档进行加密保护,同时应用office插件技术来实现对office文档权限的控制,将这两种方式结合起来,达到保护和控制电子文档的目的。本课题在对目前已知文档权限管理系统研究的基础上,实现了一个C／S架构的文档权限管理系统,在客户端实现了文档的透明加解密,即保护了重要文档,又不影响正常办公效率,另外还实现了插件对office文档权限的控制；在服务器端采用GSOAP工具搭建了一个WebService来实现和客户端的安全通信,并且采用SQL Server数据库来存储和管理数据。本文采用的这种透明加解密和office插件相结合的办法,使得控制力度更强,控制细度更精细,解决了目前一些主流的文档权限管理系统不能解决的问题,包括控制文档流转,控制文档具体使用,记录使用痕迹等等。更多还原

【Abstract】 With the trend that more and more documents are saved as digital style in computers, the information security is becoming more and more serious because that digital documents are not easily controlled and hard to trace. Improving management system is not enough for solving the problem totally. As we know, the encrypting technology can make documents safe and protect the important documents, however, the traditional encrypting technology is not efficient and cannot be finished automatically, also it cannot control its using in details.This topic is to prevent the unauthorized users use and deliver the documents. According to the above analysis, this topic put forward a kind of solution to use the transparent encryption and decryption to protect documents while we use Office plug-in to control the right of usage, these two kinds of technology are all automatic and without users’ notification. So it can not only protect documents but also can guarantee the users’ working efficiency.This system are Client/Server Structure, the client uses the transparent encryption and decryption technology while the server uses GSOAP to realize the communication and build the Web Service, the server uses SQL Server database.The combination of transparent encryption and office plug-in can strengthen the controlling and solve some problems exist in some common DRM systems such as the control of documents’circulation and record the trace of documents’using.更多还原