| With the rapid development of information industry, various data storage medium and different environment of system, which make data exchange between different application systems very difficult. To solve the information exchange problem between heterogeneous environments, which is always professional called information island, data exchange platform is born at the right moment. But at the same time, along with the establishment of exchange platform, and data transmission in network, information security faces more and more challenges.At first, this paper introduces the technology related to information security in detail. Secondly, the existing data exchange platform is rounded analyzed. Then, aimed at the information security problem existed on data exchange platform, such as malicious attacks, unauthorized access, data leakage or identity personation, a whole set of perfect security mechanism is established. Furthermore, each kind of security mechanism is analyzed and designed one by one. In the process of design, the balance between security and exchange efficiency is taken into account. And under the protection of security mechanism, one safe data exchange flow chart is given. Then, from the angle of the development, security mechanisms are turned into security modules, and the class of modules is designed and analyzed. At the end of the paper, every security module is implemented in the data exchange platform.The main innovation of this paper lies in the establishment of application domain mechanism. With using application domain, the nodes which exchanging the data are separated from the nodes which do not, and the access permissions to the data are assigned to the domain administrator controllable. A set of security mechanisms which specific to the data exchange platform in this paper has a strong versatility. So, there is a certain reference and guidance in improving the security of existing data exchange platform products and solutions. |
PDF Full Text Request