Research And Implementation Of Archive Information Security System

Digital archives information security involes many aspects, which requires reliable technical measures and excellent management of the information system to ensure the safety of digital files. It will have a great influence if we set up and impove international archive information system.This paper uses the project of University Archive information system as background and analyzes deeply in unauthorized access to the network, data tampering, counterfeiting and other security issues. According to the security risk it finds, this paper has done lots of useful exploration.Firstly, this paper analyzes the function demand of the Archive information system and determines to use C/S and Web Service as architecture. Then it assesses the project's security demands in three aspects:data exchange, DB sercurity and the confidentiality of the archive report. After that, we do some security ananlyze on these three aspects.On the level of data exchange, according to the need of security, integrity, confidentiality and authorization, we use message-level model to ensure the security of the information change. Our solution includes using username/password for the authentication and access control, using X.509 digital certificates on server side to encrypte and signature SOAP message.On the level of DB security, according to its need of data security, reliability and availability, we encrypte the sensitive data outside the DB and use reliable DB backup strategy to protect our Archive DB.On the level of the anti-counterfeiting report security, according to its need of safety, robustness, tamper resistance, we combine QRCode and asymmetric encryption to provide Archive information system a reliable efficient solution.After knowing the security needs on these three levels and analyze, we complete the design and implementation of WSE-based authentication, access control and encryption; the use of MD5 algorithm to encrypte the sensitive data in DB and QR-based anti-counterfeiting report module.Finally, in the process of QR tilt correction, we use one algorithm based on space projection tilt correction and impove the recognition rate of QRCode as well as the robustness of the whole module.