| With the development and application of digital economy, the problem of information security is getting more and more crucial. Information security has become one of the key parts that influence enterprise development, and the security of the whole country and the stability of society. Most countries and enterprises are paying serious attention to it and investing in it.The main research work presented in this thesis is to meet the requirements of security and privacy of technical document of enterprise, fully considered the characteristics of enterprise production environment and management system. The whole work is based on modern cryptography theory. The main contents are listed as following:1. To meet the need of enterprise's security requirement on technical document, the difference between digital document and paper-based document is analyzed, and a multi-signature and its verification scheme of technical document is developed based on public key cipher. A digital multi-signature management system is designed on basis of it. At the same time, for the public key management is very important in a computer security scheme that is based on public key, founded on analysis and summarization of public key management function, a public key management scheme based on simple multi-signatures is presented.2. Considered the requirement of information secrecy and share in enterprise, access control technique and identity verification technique were analyzed, and a server/client-based framework of enterprise oriented security file management is proposed that is based on RBAC and encryptions techniques. A policy of identity verification and hierarchical access control is proposed to meet the need of enterprise research and production information management.3. The application of some other security techniques about the technical document protection is researched, including Virus Prevention, Firewall, and Virtual Private Network etc.4. A practical enterprise oriented security management of technical document is developed, which is based on the principles and schemes proposed in this thesis. Users can sign a digital document including comments of signers or other related messages and verify signatures with it, and can encrypt and decrypt the technical document, and can control the access according to users' roles. The system is planned to be used in Wafangdian Bearing Group Corporation. |