企业网上年检系统的应用安全研究与设计

Research and Design of Application Security for Enterprise Online Annual Inspection System

针对企业网上年检系统在互联网环境下的可信与安全问题,提出了基于PKI/CA系统的应用安全解决方案,即通过在系统的身份认证和业务处理过程中数字信封、对称密钥加密和数字签名技术的综合应用以及相关功能和流程的设计,确保业务通信的机密性、完整性、身份确认和不可抵赖性,为面向社会公众的、基于互联网的电子政务应用提供一种成熟、可靠的安全机制。

Aiming at the demands of trustworthiness and security of Enterprise Online Annual Inspection System in Internet environment, solutions based on PKI/CA system is presented with the integrated application of digital envelope,symmetric key encryption and digital signature technologies in the processes of user authentication and transaction management as well as the design of relevant functions and procedures to ensure the confidentiality, integrality, anthentication and non-repudiation for the business transactions, and to provide a practical and reliable security mechanism for public oriented e-government application based on Internet.