铁路信息安全体系的提出及在互联网售票系统中的应用

Proposal of railway information security system and research on internet ticketing system security

信息安全是铁路信息系统建设的一个重要问题,目前我国铁路缺少统一、标准化的信息安全解决方案,伴随互联网售票系统等一批新的业务系统的应用,生产系统不可避免与外网互联,安全威胁日益加大.本文提出了安全管理中心和铁路PKI/CA认证中心支持下的安全计算环境子系统、安全区域边界子系统、安全通信网络子系统保护三重防护技术体系结构,形成纵深防御体系.基于该体系并结合互联网售票系统的特点,对互联网售票的安全体系建设展开了研究,可为相关部门采取相应的防护技术和管理措施提供理论依据和参考.

Information security is an important subject in the construction of railway information system,unified and normative solution is limited in our railway information security,with the application of several new operation systems in railway such as ticketing system etc.,manufacturing system has been connected with internet inescapability and the security threat has been increased.Treble defense-in-depth system was proposed in the paper which was supported by security management center and railway PKI/CA certification center,treble defense system was consisted of secure computing environment subsystem,security zone boundary subsystem and secure communication network subsystem.Research on internet ticketing system protection had been carried out on the base of the proposed security system,The proposed program could provide references for relevant departments.