One Implement Model SWM For Secure Website

To assure the security and authority of the government website,Finance Department spends much money on constructing Intranet, but the results is little. The information about the hacker destroying the website of political party comes now and then. The fact indicates that the traditional secure technology can not assure the security of the information system in deed.Based on the technology of SSL and public key encryption, the paper producesa common model-SWM for secure website . The modle can not only providepopularizer with the non-secretive service but also provide the special man (such as leader) with the secure secretive service . The content of the SWM includes as follows:1. storage encryption systemIt can encrypt the information on server side with different algorithm and strength . Even if the hacker intrude the server , he can only get the ciphertext and can not get the plaintext out from it;2. transmission encryption systemIt is implemented on the base of the protocol SSL . It can encrypt everything that passes through the SSL channels and append the message authentication code(MAC) , while prevent the eavesdropping and tampering by the third party;3. secure proxy on client sideThe proxy can provide high strength(with key of 128bit upwards) encrypted transmission between the secure web server and proxy while solve the problem that the current brower such as IE and Netscape Navigator can onlyprovide the low strength(with max key length of 56bit) encryption ;4. dynamic authenticationIt can authenticate the other side in communication , avoiding the imitation by the third party;5. Secure Web Service provided by S WMSWM can provide the secure web service such as Web page , secure email, secure file download , forum with no inconvenience , charting with no secure worry and present the detailed method to construct it.The contribution of the paper is to produce a feasible secure network solution for constructing political party website . With the solution ,one can construct a website with high reliability and high security through internet. The solution has the autonomout intellectual property, great economic benefit and good reference worth.