Security Mechanism Research And Application Of Enterprise OA System

OA system, as the main platform of Collaborative Office, improving the efficiency of the corporate office and relating more and more sensitive information as well. Once the information is under attack, probably bring a great loss to both enterprises and individuals. To strengthen the information security of the OA system has become one of the important development strategy of internal information construction in all walks of life, the study of OA system security mechanism has great practical significance.In this paper, based on analysis the security threats about OA system and current research status at home and abroad of its security field, focused on its typical security mechanisms and security requirements, a security framework is designed to ensure the security of OA system from several aspects. Then, applied the security framework to the construction of information platform of xi’an talent service, realized a secure and efficient OA system. Specific research content as follows:(1) Research background, related technologies and development situation at home and abroad.(2) Typical security mechanisms. This paper studies the security mechanisms including static password authentication, access control, and database encryption. In terms of authentication, the combination of password digest and random number mechanism is proposed, not only ensure the confidentility of the password, but also resist replay attack effectively. In access control, an extended model of role-based access control is put forward, this model introduced a user group, separation of powers and audit, which make the authorization management become more flexible and efficient, super authority recieved restricted effectively, user behavior get real time supervision. In the aspect of database encryption, using field level encryption, 3DES algorithm and double encryption-key manage mechanism, guarantees the security of sensitive information.(3) Based on the research above, combined with the security requirements, a security framework on the basis of OA system in terms of infrastructure, application system, manage mechanism was designed, for the safety of OA system from multi angle.(4) According to the construction requirements of OA system of Xi’an talent service center, combined with the research achievement above, deployed security facilities, used corresponding security mechanisms, developed an OA system which is safety and efficiency.