铁路信息安全体系的提出及在互联网售票系统中的应用  

Proposal of railway information security system and research on internet ticketing system security

作　　者：姚洪磊[1] 张彦[1] 祝咏升[1] 

机构地区：[1]中国铁道科学研究院电子计算技术研究所,北京100081

出　　处：《北京交通大学学报》2012年第5期105-111,133,共8页JOURNAL OF BEIJING JIAOTONG UNIVERSITY

基　　金：中国铁道科学研究院基金项目资助(1052DZ1301)

摘　　要：信息安全是铁路信息系统建设的一个重要问题,目前我国铁路缺少统一、标准化的信息安全解决方案,伴随互联网售票系统等一批新的业务系统的应用,生产系统不可避免与外网互联,安全威胁日益加大.本文提出了安全管理中心和铁路PKI/CA认证中心支持下的安全计算环境子系统、安全区域边界子系统、安全通信网络子系统保护三重防护技术体系结构,形成纵深防御体系.基于该体系并结合互联网售票系统的特点,对互联网售票的安全体系建设展开了研究,可为相关部门采取相应的防护技术和管理措施提供理论依据和参考.Information security is an important subject in the construction of railway information system,unified and normative solution is limited in our railway information security,with the application of several new operation systems in railway such as ticketing system etc.,manufacturing system has been connected with internet inescapability and the security threat has been increased.Treble defense-in-depth system was proposed in the paper which was supported by security management center and railway PKI/CA certification center,treble defense system was consisted of secure computing environment subsystem,security zone boundary subsystem and secure communication network subsystem.Research on internet ticketing system protection had been carried out on the base of the proposed security system,The proposed program could provide references for relevant departments.

关 键 词：铁路信息安全 互联网售票系统 安全管理中心 PKI/CA认证中心 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]