电子采购系统动态身份认证策略研究  

Dynamic Identity Authentication Policy of E-Procurement System P2DR Research

作　　者：罗东[1] 秦志光[2] 马新新[2] 

机构地区：[1]电子科技大学管理学院,成都610054 [2]电子科技大学计算机科学与工程学院,成都610054

出　　处：《电子科技大学学报》2007年第6期1315-1318,共4页Journal of University of Electronic Science and Technology of China

摘　　要：分析了电子采购系统身份认证的常用方式及应用;结合P2DR模型及其体系结构,得出动态身份认证P2DR安全模型;针对电子采购系统的安全需求,提出了基于P2DR的电子采购系统身份认证策略模型。该策略模型根据不同用户在电子采购不同阶段的不同安全需求,综合考虑政策、成本、业务范围等因素,动态调整电子采购系统身份认证形式,实现"安全、成本、效率"的动态平衡。The modes and applications of identity authentication in common used E-Procurement System （EPS） are analyzed in this paper firstly. Then, the dynamic identity authentication policy model is acquired according to Policy, Protection, Detection, and Response （P2DR） model and architecture. Finally, the identity authentication policy model based on P2DR is proposed for the security requirement of EPS. Considering all kinds of factors such as policy, cost, working scope and so on, this policy model can adjust the modes of EPS dynamically and realize the homeostasis among ＂security, cost and efficiency＂ for different security requirements and users in each stage of e-procurement.

关 键 词：电子采购系统 身份认证 信息安全 策略 

分 类 号：TP389.1[自动化与计算机技术—计算机系统结构]