Study Of CSCD Information Security Solution Based On J2EE

As the global informatization is closing in upon, the information security of CSCD application system has become the focus everbody cares. This paper studies information security problem of CSCD application system under J2EE, and discusses the theory and method of information security to fulfill its confidentiality, integrality, authentication, and non-repudiation by analyzing its system architecture.Firstly, this paper introduces the definition of CSCD and information security, its development actuality and the background.Secondly,this paper summarizes pertinent theory of the information security solution, including : J2EE, CSCD and information security.And in allusion to one concrete CSCD management system by anaylizes various information security technology, studying information security requirement, this paper improves on one end-to-end solution as follows: ensuring system user identity ascertain and data transmission secret by authentication and secure transmission; realizing secure access of system resource by access control; ensuring data correction and non-repudiation by digital signation.Authentication is vital in a information security system.An authentication provides a service by PBE/digital signature double factor manner for overcoming lost critical authentication information of single authentication manner.Access control security of a cooperative design system is not a trivial task.This paper realizes secure access by access control based-on role and attribute certificate in digital certificate; realizing end-to-end data transmission security by JSSE technology; realizing signature and verify signature of file by digital signature; however,to design a simple CA for secret key generating, saving and reading.Finally, this paper gives an application example based on J2EE to demonstrate the procedure in part of CSCD information security solution.