The Design And Implementation Of The Electronic File Protected Based Digital Rights Managed(DRM) System

As Internet and digital technologies have made rapid progress in recent years, electronic document becomes the major means of information distribution, transmission and storage. Due to its characteristics of easy to be copied, modified and transferred however, very serious problems about sensitive information disclosure and copyright issues might be caused. Thus, electronic document is confronted with a great risk of security. Therefore, the research on content security has been the research and development hotspot of information security.This thesis discusses technologies of electronic document security and digital rights management (DRM) systemically. Upon the basis of in-depth analysis and study of the basic theory of electronic document protection, such as DRM digital rights management, information encryption and hiding, security protocol, and system implementation technologies including.NET, Windows drive and HOOK, the design and implementation solution of a DRM-based electronic document security system, IPPS Security System, is presented in this thesis.The outstanding characteristic of IPPS is that it establishes multilayered and all-aspect architecture: of information disclosure prevention; in which the electronic document is scattered while the control policy is centered, the security and controllable are implemented while the document is being shared, the access authorities are precise, and the approach to protection is complete. In this thesis, the design method of IPPS is discussed in detail on several aspects including requirement analysis, system architecture, functional modules decomposition, and design of data and presentation layer. Further, the key implementation techniques of IPPS such as file encryption and decryption, single site log on, copyright information hiding and temper prevention are discussed and analyzed in this thesis.Besides sharing electronic document, IPPS can effectively control various operations on the document by authorized user through authorization control, while it can prevent unauthorized user from obtaining the document illegally. By using track technique, IPPS can keep track of user's operations on the protected electronic document, which provides important data for later audit, and eventually, implements the security and controllable of the process of distribution and use of electronic document.IPPS has been implemented. Both the effectiveness and the feasibility of the proposed solution have been proven through the preliminary application in several organizations.