一种电子申报系统安全体系结构的研究

Study on the Security System Structure of a Kind of Electronic Applying System

针对一种电子申报系统的特点和安全要求提出了安全解决方案。采用一种具有DMZ的防火墙把内网(Intranet同不安全的外网) (Extranet隔离。该方案拟定用安全套接层协议(SSL)来保证用户与系统之间的数据的安全传输,用户身份验证采用CA机制,内部网用认)证中心进行用户身份认证。

Focusing on a kind of electronic applying system's characteristics and its security requirements, a scheme of enhancing network security is presented. In this scheme, a kind of firewall with DMZ is adopted to separate Intranet from unsafe Extranet. The security of data transmission between users and the system is ensured by SSL. CA is used to authenticate the exterior users' identities. Interior users' identities are verified by an inner authentication center.