Design And Implementation Of Business Secrets Confidential Work Platform

Confidentiality is a professional discipline, engaged in security work staff is relatively small, confidential work personnel will be relatively fixed. With the secrecy work situation is becoming increasingly grim and complex, confidential work to develop healthily, confidential work management can not only rely on administrative means to manage, need to be standardized, scientific management. At present, confidential work oil remains in the paper and electronic documents mixed management stage, query and statistics of relevant information by manual based, data files shared and the security of secret information security management there are many problems. Therefore, according to the requirements of the project proposed the establishment of a unified security work platform, covering the confidential business management content, implementation of oil security work information.Aiming at the security work of the construction of the platform, the use of oracle10 development framework based on EJB3.0 standard, build the. Show from the database layer to layer in turn is the database layer, data persistence layer, business logic layer(inheritance EJBSuper category Session Bean) 61664 data control layer(JSF Back Bean) 61664 data display layer(JSF or JSP). This new architecture so that the level of program structure more clearly, this structure can also be the business logic(EJB) and the data display layer(JSF) are deployed on different servers, so as to improve the performance of the system.Confidential work platform involves enterprises an important secret information, so in the platform construction at the beginning of security requirements for the platform construction are high. The platform uses unified authorization and single sign on(Single Sign On), implements unified management of user multi system account, multiple applications to use the same account and password, but is independent for each system authorization. The principle of unified authorization is the realization of the single sign on. The other is based on the digital signature of electronic seal of PKI/CA technology can be signed and sealed by the guarantee of legitimacy and validity of documents for more formal documents, documents and other documents are, the validity of documents can be verified, to ensure that the identity can be traced back. At the same time, in order to strengthen the confidentiality of technical prevention measures, also developed aclient program in the system(using the regulation of mobile storage medium), through a unified service time distribution strategy of functional to install the client, mobile use of confidential network computer storage mobile memory swap record real-time record computer storage medium. To achieve early warning function.The thesis is mainly divided into three parts: the first part is the important key process requirements analysis and combing confidential business management of project. The second part according to the secret service management processes, confidential information management, daily management, classified secret equipment management, query statistics, database, mobile storage medium using regulatory function module is introduced, at the same time, do a good job of modeling and design of database. The third part realize the secure management of various functional modules, and make the system login module design, and finally completed the system function test.This project is mainly to build a working platform, the secrecy management form relevant records and data sharing to achieve information, strengthen the confidentiality of technical prevention measures, and build a strong line of defense of secrecy.