The Design Of E-Government Smart Information Exchange System Based On AAA

The Smart Information Exchange System is a feasible approach to dealing with"Information Island ". And PKI/PMI is the most effective method to ensure transactionsand communications on Internet. This thesis will discuss the security aspect of theSmart Information Exchange System based on PKI/PMI.This problem comes from an E-Government project——the certain integrativeadministration information service platform system, which attempts to realize thecooperative work between different systems. It is emphasized that this informationexchange system is not only suitable for E-Government, but also applied to many otherfields.Based on PKI and PMI, this thesis analyses and discusses the system's securityissues from three aspects: authentication, authorization and auditing (that's AAA). Fromthese three aspects, the security design of this system is given. The author proposes anauthentication method based on public key certificates, designs the authenticationsubsystem and the authorization & access control subsystem, then discusses the securityauditing subsystem design. Here, the author makes reference to PERMIS to design theauthorization & access control subsystem and improves several aspects of PERMIS.Finally, the author gives the general system security framework and simply analyses itsworking flow.By discussing the security design of Smart Information Exchange System, theoriesand applications of this system have been further developed in this thesis, which lays afoundation for establishing a secure, effective and adaptive information exchangeplatform. And a reference and guidance is offered to further research of this system.