基于PKI/CA的数据服务安全系统研究  

PKI/CA based security system for data services

作　　者：许进[1] 王娟[1,2] 邱宏茂[1] 王晓明[1,2] 李健[1] 商杰[1] 

机构地区：[1]禁核试北京国家数据中心,北京100085 [2]中国地震局地球物理研究所,北京100045

出　　处：《计算机工程与设计》2013年第8期2995-3000,F0003,共7页Computer Engineering and Design

摘　　要：数据服务是获取信息的重要方式,而安全性和可靠性是提供数据服务的重要前提。禁核试北京国家数据中心是我国禁核试核查相关监测数据的收集、存储、分析和处理中心,为实现其数据服务的安全保障,针对该系统进行了安全风险评估;设计和实现了基于PKI/CA技术的用户身份认证、访问控制机制的数据服务安全认证系统,并给出了数据安全服务的实现流程;针对所实现的数据服务安全系统,制定了相应的安全保障策略。Data services have become an important way of acquiring information and an integral part of the society.Security and reliability are important prerequisites for the provisioning of data services.CTBT Beijing National Data Center is in charge of collecting,storing,analyzing and processing related data.The issue of the security for data services of CTBT Beijing National Data Center is discussed.To start with,a risk assessment of the data service system is presented.Next,the design and implementation of a PKI/CA based security certification system are introduced to deal with user authentication and access control for data services.Additionally,the processes of realizing security services are illustrated.Finally,security guarantee policies for the data service system are offered.

关 键 词：公钥基础设施 数字证书 数据服务 访问控制 安全保障策略 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]