基于PMI的OA安全模型设计与实现

Design and realization of OA security model based on PMI

鉴于OA系统中的非授权用户非法操作和合法用户的越权操作,以及PKI的公钥证书(PKC)只能提供身份验证,无法实现权限管理等问题,提出了一种基于PMI(权限管理基础设施)权限管理的OA安全模型。该模型使用PKI的公钥证书和PMI的属性证书进行身份验证和权限管理,防止了非法和越权操作,授权更具公正性和权威性。实践结果表明,该安全模型可以解决OA系统中用户的非授权访问、不可否认性和数据文件的保密性、完整性等安全性问题。

In view of illegal operation of non-authorized users and the operation of ultra vires from the legitimate user in the OA system, as well as the public key certificate of the PKI can only provide authentication, but rights management can not be achieved and so on.A rights management security model is provided based on PMI for the OA system.The model uses public key certificate of PKI and attribute certificate of PMI for the authentication and rights management.It is effective to prevent illegal and ultra vires operation, and make authorization more impartial and authoritative.Practice shows that this security model can solve some security problems like non-authorized users access, non-repudiation, privacy and integrity of the data documents and so on in the OA system.