电力企业集成环境下的信息安全解决方案研究  

Research of information security solution in power enterprise integration

作　　者：马茜[1] 段斌[1] 邹吉昌[1] 孙璐[1] 

机构地区：[1]湘潭大学信息工程学院,湖南湘潭411105

出　　处：《计算机应用研究》2008年第2期533-537,共5页Application Research of Computers

基　　金：湖南省自然科学基金资助项目(05JJ30209);湖南省教育厅优秀青年基金资助项目(05B006)

摘　　要：针对如何确保电力企业中各应用系统的安全无缝集成,以及新开发的应用系统快速、安全、灵活地融入,提出了基于Web services的电力企业安全集成解决方案;从信息的安全访问和传输角度出发,分析了现有安全通信解决方案的不足,并通过对国际最新信息技术和信息安全技术规范的研究,设计了基于XML、SOAP、SAML、WS-security的集成安全系统模型。重点对其中的身份认证和安全通信机制问题进行了研究,解决了用户与系统之间、系统与系统之间的安全通信问题,从应用层级别确保了信息的有效性、完整性、机密性和不可否认性。How to ensure the safe, seamless integration of various application systems, and make the new development application systems to be quickly, safely and flexibly joined, were becoming important problems in the stability and highly efficient operation of electric power enterprise. Aimed at all of the above problems put forward an electric power enterprise safe integration solution based on Web services, analyzed the deficiency of existing secure communication solutions from the point of view of information secure access and transmission, then designed an integration safe system model based on XML, SOAP, SAML, WS-security by researching on the international up to date information technology and the information security techn-ology cflteflon. Researched the authentication and the mechanism of security communication were. It solved the problem of security communication between users and systems, between systems and systems, and ensured the validity, integrality, confidentiality and nonrepudiation of the information from the application layer.

关 键 词：电力企业 应用集成 信息安全 WEB服务安全 

分 类 号：TM73[电气工程—电力系统及自动化]