基于Web的教务管理系统安全方案设计  

Design of security solution for Web-based educational administration system

作　　者：孙飞显[1] 徐明洁[2] 杨进[1] 王铁方[1] 刘孙俊[1] 

机构地区：[1]四川大学计算机学院,四川成都610065 [2]河南教育学院教务处,河南郑州450014

出　　处：《计算机应用》2006年第5期1198-1201,共4页journal of Computer Applications

基　　金：河南省科技厅科技攻关项目(0424220060);河南省教育厅自然科学基金项目(2003520289)

摘　　要：分析了传统教务管理系统存在的安全问题,提出了基于Web的教务管理系统安全设计方案。从网络边界安全、身份鉴别与访问控制、入侵检测、数据加密、服务器安全、灾难备份与恢复等方面对系统进行全方位保护,并给出了整体设计架构。该方案能阻止非法用户的入侵,防止合法用户越权访问;同时,基于身份的加密方案确保数据在使用、存储、传输和处理过程中的机密性、可用性、完整性和不可抵赖性,克服了PKI机制公钥管理困难、成本高、效率低等不足。理论分析和实验结果表明,该方法是保证高校教务管理系统安全运行的一种有效解决方案。The security problems of traditional educational administration systems（TEAS） were analyzed. In order to improve their security, a novel integrated solution was proposed. In which, network border protection, user identification and access control, intrusion detection, servers＇ security, and disaster recovery were presented or strengthened. So the invalid users can be held back, and the exceeding access of valid users can be prevented. At the same time, the new method of Identlty-Based Encryption（IBE） can ensure the confidentiality, integrality, usability and the undeniable-ness of the data during the processes of storage, transmission, processing, and so on. As a result, the shortages of PKI, such as the difficulty in managing the public keys, high costs, and low performance can be overcome. Theoretical analysis and the experimental results show that it provides a good security solution to the field of MIS.

关 键 词：网络安全 PKI/PMI 基于身份加密 教务管理系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]