基于XML的工程图档管理安全模型的研究  

Research on Security Model of XML Engineering Drawings Management

作　　者：周全书[1] 

机构地区：[1]浙江理工大学计算机技术教研部,杭州310018

出　　处：《浙江理工大学学报（自然科学版）》2007年第3期271-277,共7页Journal of Zhejiang Sci-Tech University(Natural Sciences)

摘　　要：在工程图档设计工作流管理中,安全是一个十分重要的课题,随着网络及Web Service的不断发展,基于XML的图档应用越来越广泛。在分析现有类似系统的不足及工程图档设计工作流后,构造了基于XML的工程图档管理安全模型,分用户认证、图档存储安全协议和基于XML的存取控制三个相关联的方面来实现。并通过智能卡、SVG的图档文件及定义结合工作流管理的授权XML集进行了实践和分析,表明系统还具有可撤回性及不可否认性,可扩展应用到其他企业信息安全管理中。XML will be more adopted in engineering drawings design due to its extensibility. Although it is extremely important to protect XML documents from being illegally modified or accessed, the development of XML security in drawings design workflow is still in its infancy stage. The author construct a security model of engineering drawings management, including user authentication, the security protocol in storage of drawings files and XML access control. A prototype has been designed and implemented using smart cards, SVG drawings files and authorization XML integrated with design workflow. It could be applied in other enterprise information management application.

关 键 词：工程图档 工作流 XML 用户认证 安全协议 存取控制 智能卡 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]