支持细粒度授权的电子文档防泄密系统网络通信设计  

Design of Network Communication for Electronic Document Leak Prevention System Based on Fine-grained Authorization

作　　者：毛丽荣[1] 马兆丰[1,2] 黄建清[3] 杨义先[1] 钮心忻[1] 

机构地区：[1]北京邮电大学网络与信息攻防技术教育部重点实验室,北京100876 [2]北京国泰信安科技有限公司,北京100876 [3]北京邮电大学图书馆,北京100876

出　　处：《小型微型计算机系统》2011年第2期242-247,共6页Journal of Chinese Computer Systems

基　　金：国家"九七三"重点基础研究发展计划项目(2007CB311203)资助;国家自然科学基金项目(60803157;90812001)资助;国家"二四二"项目(2009A105)资助;国家标准制定计划(20080200-T-339)资助;国家质检公益性科研专项(10-126)资助

摘　　要：网络通信是电子文档防泄密系统的重要组成部分,如何高效地处理大量并发客户请求且不丧失整体的性能是设计系统时需要考虑的问题.结合选择模型和完成端口模型,设计了支持细粒度授权的电子文档防泄密系统的网络通信,采用完成端口模型实现用户身份认证、用户离线申请等功能,采用选择模型实现用户上传密文文档至服务器备份功能.实验验证了选择模型在文件传输方面具有安全可靠和高速的特性,完成端口使用线程池机制解决了网络通信系统服务器端大量并发短连接的问题,提高了系统性能.Network communication is an important part of the electronic document leak prevention system. How to efficiently handle a large number of concurrent client requests but without loss of overall system performance is an issue to be considered when the system is designed. Combining the select model and the completion port model, the high concurrent communication for electronic document leak prevention system is designed in this paper. IOCP model is adopted to realize user authentication, user off-line application and so on. Select model is adopted to realize the function of user uploading encrypted documents for server backup. The experiment results demonstrate that using select model to transfer file is secure and fast, and IOCP model using thread pool mechanism solves the prob- lems which happen in the server-side of communication system when dealing with short handle and a large number of concurrent con- nections, in which way system performance is greatly improved.

关 键 词：网络通信 选择模型 完成端口模型 电子文档 细粒度授权 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]