Research and implement of file safe deposit box based on authentication and authorization

Xiao-ning DONG; Xiao-ping WU; Hong-cheng LI

doi:10.11959/j.issn.2096-109x.2016.00054

您当前的位置：

首页 >

文章列表页 >

Research and implement of file safe deposit box based on authentication and authorization

Papers | 更新时间：2024-06-03

- Research and implement of file safe deposit box based on authentication and authorization
- Chinese Journal of Network and Information Security Vol. 2, Issue 5, Pages: 16-20(2016)
- 作者机构：
  
  1. 海军驻北京地区通信军代室，北京 100000
  2. 海军工程大学信息安全系，湖北武汉 430033
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00054
  CLC： TP309
- Online First：2016-05，
  
  Published：15 May 2016
- 稿件说明：
移动端阅览
Xiao-ning DONG, Xiao-ping WU, Hong-cheng LI. Research and implement of file safe deposit box based on authentication and authorization[J]. Chinese Journal of Network and Information Security, 2016, 2(5): 16-20.
DOI：

Xiao-ning DONG, Xiao-ping WU, Hong-cheng LI. Research and implement of file safe deposit box based on authentication and authorization[J]. Chinese Journal of Network and Information Security, 2016, 2(5): 16-20. DOI： 10.11959/j.issn.2096-109x.2016.00054.

摘要

摘要：针对现有的文件保险箱缺乏文件管理机制和在线身份认证的问题，设计并实现了基于认证授权的文件安全保险箱系统。系统首先对文件保险箱的用户进行在线身份认证，避免非法用户登录，并利用服务器收集客户端上对机密文件的敏感操作行为事件，进而对用户操作进行细粒度集中授权管理，避免了内部用户的非法操作和误操作。通过测试表明，系统实现了预定的功能，具有良好的通用性和适用性。

Abstract

Considering that the existing file safe deposit boxes lack online authentication and server authorization

a file safe deposit box based on authentication and authorization was designed and achieved.This system firstly identified the users of the file box online

thus avoiding the illegal users to login.Moreover

the master collected the operation events exerted on the files in the clients

and the master provided a granular authentication for the operation of users

thus avoiding the illegal operation and incorrect operation.The test of this system proved that it can be able to achieve the preset functions and can be widely used in many conditions.

关键词

Keywords

references

李成东 , 徐飞 . 一种基于 USBKEY 的文件保险箱系统设计与实现 [J ] . 软件学报 , 2013 , 10 ( 5 ): 11 - 15 .

LI C D , XU F . A USBKEY based file system design and implementation of safe [J ] . Journal of Software , 2013 , 10 ( 5 ): 11 - 15 .

熊厚仁 , 陈性元 , 费晓飞 , 等 . 基于属性和RBAC的混合扩展访问控制模型 [J ] . 计算机应用研究 , 2015 , 34 ( 9 ): 29 - 33 .

XIONG H R , CHEN X Y , FEI X F , et al . The mixted extent access control model based on attribute and RBAC [J ] . Computer Application Research , 2015 , 34 ( 9 ): 29 - 33 .

叶重阳 , 庄毅 . 一种基于多维信任度的动态 RBAC 模型 [J ] . 计算机与现代化 , 2015 , 19 ( 8 ): 20 - 24 .

YE C Y , ZHUANG Y . A dynamic RBAC model based on multi-dimensional trust [J ] . Computer and Modern , 2015 , 19 ( 8 ): 20 - 24 .

戈泉月 , 车力军 . 基于多因素认证的网络安全支付模式研究 [J ] . 信息网络安全 , 2015 ,( 12 ): 48 - 59 .

GE Q Y , CHE L J . Network secure payment mode study based on multi-factor authentication [J ] . Information Network Security , 2015 ,( 12 ): 48 - 59 .

戈泉月 , 车力军 . 基于 SELinux 强制访问控制的进程权限控制技术研究与实现 [J ] . 信息网络安全 , 2015 ,( 12 ): 34 - 42 .

GE Q Y , CHE L J . Research and implementation of the process of access control technology based on SELinux mandatory access control [J ] . Information Network Security , 2015 ,( 12 ): 34 - 42

白辉 . 在线授权认证平台的设计与实现 [D ] . 广州:华南理工大学 , 2010 .

BAI H . The design and implementation of online authorization certification platform [D ] . Guangzhou:South China University of Technology , 2010 .

张悦 , 郑东 , 张应辉 . 支持动态授权和文件评价的访问控制机制 [J ] . 计算机应用 , 2015 , 32 ( 4 ): 127 - 131 .

ZHANG Y , ZHENG D , ZHANG Y H . Access control mechanism which support dynamic authorization and file evaluation [J ] . Journal of Computer Applications , 2015 , 32 ( 4 ): 127 - 131 .

沈洋 . 安全文件服务系统的研究与开发 [D ] . 武汉:武汉理工大学 , 2014 .

SHEN Y . The research and development of the security file service system [D ] . Wuhan:Wuhan University of Technology , 2014 .

张红林 . 分布式文件系统中集中安全管理服务器设计与实现 [D ] . 武汉:华中科技大学 , 2011 .

ZHANG H L . Design and implementation of centralized safety management server in distributed file system [D ] . Wuhan:Huazhong University of Science and Technology , 2011 .

马骏 , 郑逢斌 , 沈夏炯 . C#网络应用高级编程 [M ] . 北京 : 人民邮电出版社 , 2006 ： 59 - 67 .

MA J , ZHENG F B , SHEN X J . High-level programming of C# network application [M ] . Beijing : People's Posts and Telecommunications PressPress , 2006 : 59 - 67 .

Views

302

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

⁰