跨系统可信互联安全体系研究  

The Research on Trustworthy Interconnection Security Architecture between Information Systems

作　　者：邹翔[1] 沈寒辉[1] 周国勇 

机构地区：[1]公安部第三研究所 [2]公安部信息通信局

出　　处：《信息网络安全》2008年第11期39-41,共3页Netinfo Security

基　　金：国家863计划项目(2006AA01Z450,2008AA01Z412)

摘　　要：各部门及行业信息系统之间互联互通已成为我国信息化建设进一步深入发展的主题之一。本文提出通过建立可信互联平台,在实现跨系统互联的同时,保障信息交换和共享过程中各信息系统的信息网络安全。文中就跨系统可信互联的范围和目标进行了定义,提出和设计了可信互联平台安全体系,建立了安全体系实现框架,并对其中的边界防护机制和安全数据交换机制进行了论述。该安全体系已在实际应用中初步实现并取得了良好效果。Interconnection between information systems of government and industry has been one of the main subjects for the further development of information construction in China. This paper presents a trustworthy interconnection platform in order to protect information and network security of information systems when they are interconnected. We define the scope and objective of trustworthy interconnection between information systems, and design Security Architecture of the trustworthy interconnection platform, and construct the implementation framework of Security Architecture. In addition, we discuss the border protection mechanism and secure data exchange mechanism in the Security Architecture. The Security Architecture has been primary implemented and achieved good effects in actual applications.

关 键 词：可信互联 等级保护 安全体系 边界防护机制 多级安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP309[自动化与计算机技术—计算机科学与技术]