基于认证授权的文件安全保险箱技术研究与实现  

Research and implement of file safe deposit box based on authentication and authorization

作　　者：董晓宁 吴晓平[2] 李洪成[2] 

机构地区：[1]海军驻北京地区通信军代室,北京100000 [2]海军工程大学信息安全系,湖北武汉430033

出　　处：《网络与信息安全学报》2016年第5期16-20,共5页Chinese Journal of Network and Information Security

基　　金：国家自然科学基金资助项目(No.61100042);湖北省自然科学基金资助项目(No.2015CFC867)~~

摘　　要：针对现有的文件保险箱缺乏文件管理机制和在线身份认证的问题,设计并实现了基于认证授权的文件安全保险箱系统。系统首先对文件保险箱的用户进行在线身份认证,避免非法用户登录,并利用服务器收集客户端上对机密文件的敏感操作行为事件,进而对用户操作进行细粒度集中授权管理,避免了内部用户的非法操作和误操作。通过测试表明,系统实现了预定的功能,具有良好的通用性和适用性。Considering that the existing file safe deposit boxes lack online authentication and server authorization, a file safe deposit box based on authentication and authorization was designed and achieved. This system firstly identified the users of the file box online, thus avoiding the illegal users to login. Moreover, the master collected the operation events exerted on the files in the clients, and the master provided a granular authentication for the operation of users, thus avoiding the illegal operation and incorrect operation. The test of this system proved that it can be able to achieve the preset functions and can be widely used in many conditions.

关 键 词：文件保险箱 在线认证 授权管理 远程控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]