智慧城际铁路数据安全治理体系及其关键技术研究  

Research on data security governance system of intelligent intercity railway and its key technologies

作　　者：肖彦峰 王辉麟 贾凡[3] 胡利兰 XIAO Yanfeng;WANG Huilin;JIA Fan;HU Lilan(China Railway Science(Beijing)Information Engineering Design Consulting Co.,Ltd,Beijing 100081,China;Institute of Computing Technologies,China Academy of Railway Sciences Corporation Limited,Beijing 100081,China;School of Electronic Information Engineering,Beijing Jiaotong University,Beijing 100044,China)

机构地区：[1]中铁科(北京)信息工程设计咨询有限公司,北京100081 [2]中国铁道科学研究院集团有限公司电子计算技术研究所,北京100081 [3]北京交通大学电子信息工程学院,北京100044

出　　处：《铁路计算机应用》2023年第5期68-73,共6页Railway Computer Application

基　　金：中铁科(北京)信息工程设计咨询有限公司科研项目(DZYF21-66)。

摘　　要：为有效应对网络攻击,在确保数据安全的前提下满足智慧城际铁路数据共享需求,结合当前主流的零信任架构、软件定义边界技术、隐私计算技术及微服务技术,提出基于云端的智慧城际铁路数据治理体系架构,包括数据基座、数据共享平台、数据管控平台和应用服务,能够实现动态的细粒度数据访问控制,满足不同应用场景下差异化数据安全及隐私保护的需求。In order to effectively cope with network attacks and meet the data sharing requirements of smart intercity railway on the premise of ensuring data security,the architecture of a cloud-based data governance system of smart intercity railway is proposed by combining the current mainstream zero-trust architecture,software-defined boundary technology,privacy computing technology and micro-service technology.This system is composed of a data base,a data sharing platform,a data management and control platform and application services and can achieve dynamic and fine-grained data access control to meet differentiated data security and privacy protection requirements in application scenarios.

关 键 词：智慧城际铁路 数据安全 零信任 软件定义边界 微隔离 隐私计算 

分 类 号：U239.5[交通运输工程—道路与铁道工程]