A Study And Construction Of Sino-Rail Information System Security Architecture

"A study and Construction of Sino-Rail Information System Security Architecture" is an important project initiated by the Ministry of Railway in 2002-2003. The purpose of the project is analyzing the current status of the information system, finding the limitation, and constructing the security architecture for the information system.The author of this thesis was in charge of two sub-projects, PKI/CA infrastructure and authentication and authorization for application system, and dealt with the solution designing work. Based on the project implementation, the article comes from the practicing work. In the article, the author gives out the current status of the information system, sums up the security requirements and the purpose of the project. Based on the theory of access control, the author gives out the solutions for the PKI/CA infrastructure, network access proxy mechanism, authentication and authorization mechanism and the security architecture for the application system.The solution for the Sino-Rail Information System Security Architecture now has passed the evaluation made by the Ministry of Railway, and has a pioneer engineering and the solution has been proved by the pioneer engineering.