Highways Network Design And Implementation Of Security Mechanisms,

Paper regards Shandong Road Administration system (RAS) as background, analyses its network threat and risk, puts forward the whole solution of RAS safe mechanism, involving system security and information security.Information that work in RAS mainly includes the government document, report form data, files used to examine and approve etc. . How to effective protect all these information circulating safely among whole network, how to realize security transmission from all parts divided databases to the center database of province, have become the present important task. Utilizing the Security Socket Layer protocol (SSL) to set up the information transmission on the public key infrastructure (PKI), SSL VPN is a suitable method. It has well reflected its advantage of needless of the customer end software, convenience of management, high security.But SSL has no the function of digital signature. Facing the request of Non-repudiation afterwards in the work of RAS, SSL demonstrates the innate defect. Comparing current many kinds of official documents signature scheme, paper selects the XML digital signature. However, the signature and verification defined in the XML syntax, introduced by the W3C, are complicated and tedious. On the premise of guaranteeing result of signatures, the paper simplifies and revises the original course to propose a high-efficient signature verification course. Based on specific forms of different examination and approval files in the work of RAS, the paper establishes corresponding XML mode of them, realizes XML signature in a flexible way, remedy shortcomings of other signature scheme, utilizing XML signature syntax and processing that W3C put out.Finally, the paper regarded the online system of examining and approving as the instance, explained the value and function of the safe scheme in the actual application, demonstrated the application and reply of the safe online examination and approval, representing the equivalent result of electronic stamped signature.