Web Service Based E-Government Security Platform

With the advance of the process of e-government information, the advantages ofe-government highlights. Compared to traditional government way, the work efficiency hasimproved greatly, but because of the lack of unified planning and initial construction，the variousbusiness systems can not communicate with each other, forming one of the "islands ofinformation" and not concatenating with the information needs now interworkingThis paper is based on Ningxiang County e-government status quo. Starting from resourcesharing needs, access control requirements, and transmission security requirements, it designs aweb services-based RBAC e-government security platform to achieve interoperability betweenheterogeneous information management systems, access control and secure communications.Platform for research and design process, mainly to solve three problems:First, Information resource exchange and sharing. For the current status of e-governmentsystem fragmented, It proposes a way to use XML and web services to solve Internetcommunication problems between heterogeneous systems.Second, user access control. For the characteristics of large number of users and largeaccess level, this paper designed the USBKEY-based authentication model. With the Two-factorauthentication by USB Key’s serial number and user password, the hardware of users’ machineand USBKEY can bind together to enhance the credibility of user identity and authenticationalgorithms to achieve.It uses RBAC access control model with time constraints, by extending the RBACpermissions, it provides an effective solution to the problem of large number of users, assignpermissions and revocation.Third, Security issues of e-government information transmission. With the limits of worklevel and transmission method, the traditional SSL/TLS couldn’t provide end-to-end security. Inthis paper, the selective encryption of information using the SOAP protocol, do the fine-grainedprotection, prevent critical information from eavesdropping, tampering, replay.The solution of these three issues have some positive significance for solving the problem ofe-government "information island", and build an interoperability and strict access, safe andefficient e-government environment.Finally, the paper points out the platform for further research and make a prospect of thefuture construction of the platform.