基于对称加密算法的企业电子邮件权限安全管理  

Security management of enterprise email authority based on symmetric encryption algorithm

作　　者：陈又咏 蔡清远 张富林 董昌朝 冯兰贤 CHEN Youyong;CAI Qingyuan;ZHANG Fulin;DONG Changchao;FENG Lanxian(Fujian Yirong Information Technology Co.,Ltd.,Fuzhou 350001,China)

机构地区：[1]福建亿榕信息技术有限公司,福建福州350001

出　　处：《电子设计工程》2024年第4期65-70,共6页Electronic Design Engineering

基　　金：信创公共应用软件研究开发(53681121000800K0000000)。

摘　　要：进行企业电子邮件权限安全管理时,主要采用非对称加密算法,导致企业电子邮件权限的安全管理效果较差,权限安全管理的时间开销较大。为此,设计一种融合对称加密算法的企业电子邮件权限安全管理方法。根据电子邮件实际内容定义标签和标识,明确电子邮件的安全级别。基于邮件发送人在企业内充当的角色,设计一种对称加密算法对电子邮件内容进行加密。运用PMI+PKI技术,结合身份认证特性和权限分配特性,建立邮件权限控制机制。从发送者和接收者两方面入手,认证电子邮件安全访问权限,实现企业电子邮件安全管理。实验结果显示,所提方法的邮件权限安全管理效果较好,整体时间开销为0.38 s,相比基于区块链、基于差分隐私的方法,时间开销分别减少了68.07%、39.11%。In the security management of corporate email rights,asymmetric encryption algorithms are mainly used,resulting in poor security management effect of corporate email rights and a large time overhead for security management of rights.To this end,a security management method for enterprise email rights that integrates symmetric encryption algorithm is designed.Define labels and tags based on the actual content of the email to clarify the security level of the email.Based on the role of the email sender in the enterprise,a symmetric encryption algorithm is designed to encrypt email content.Using PMI + PKI technology,combined with identity authentication features and permission distribution features,establishes an email permission control mechanism.From the sender and the receiver,authenticate the security access authority of email,and realize the security management of enterprise email.The experimental results show that the proposed method has better security management effect of email permissions,and the overall time overhead is 0.38 s.Compared with the methods based on blockchain and differential privacy,the time overhead is reduced by 68.07% and 39.11%.

关 键 词：对称加密算法 电子邮件 信息安全 权限管理 隐私保护 权限认证 

分 类 号：TN91[电子电信—通信与信息系统]