As The Core Information In An Encrypted Security System Design And Realization

A lot of work has been done towards the higher security of information system,and many mature information system prototypes have been developed. Based on the current available information system models,we developed a new practical information system security architecture in this thesis,which has taken into consideration of the new security properties of information systems. In our information system security architecture,a variety of measures,including security techniques,laws,managements and social factors,work together to guarantee the desired security level of information system. Guided by the developed information system security architecture,we implemented an instance scheme for secured information system that meets the security requirement of an actual medical insurance information system,including a medical insurance network security solution and a medical insurance information encryption system.In addition to the development of the network model for the medical insurance information transmission encryption subsystem,the thesis detailedly presents the encryption scheme for the transmission encryption system. The encryption scheme can certify the identity of both transmitter and receiver,guarantee that the information is of security,integrity,availability and provide digital signature service. The medical insurance intelligence encryption system is a relative large encryption system,including the hardware for the encryption,the encryption algorithm,PKI infrastructure based CA center,the RA registration center,the encryption server for both encryption and decipher duty and so on. Several encryption cards are plugged in and managed uniformly by a single computer that functions as an encryption server,thus realizes high speed encryption.By reasonably combining the medical insurance network security solution and the medical insurance information encryption system in the medical insurance information system,the security of the whole system in terms of both the system network and the information transmission and storage are guaranteed.