浅谈如何解决中药材电子商务软件中信息不安全方案

How to Ensure Information Security in E-Commerce Software for Chinese Herbal Medicines

新型的电子商务模式在改变了传统的中药材交易模式,降低交易成本的同时,存在着Cookie技术安全、软件对用户输入的数据没有进行合法判断、数据传输过程未有效加密以及数据库的敏感信息加密算法简单等安全问题。为提高中药材电子商务软件的信息安全,应对应用程序、传输的数据进行对称加密,对数据库中的敏感信息进行不可逆加密,对称加密体系和非对称加密体系结合使用,定期更换数据库系统密码。

The new e-commerce model has changed the trading mode of traditional Chinese herbal medicines and reduced transaction costs. However, underlying threats remain owing to Cookie technology security, illegal judgment on data input by users, ineffective encryption in the process of data transfer and simple encryption algorithm for sensitive information about the database. We should encrypt symmetrically applications and transmitted data and encrypt irreversibly sensitive information about the database. We should use both symmetric and asymmetric encryption system and regularly change database system passwords. By doing so, we can tighten information security.