Design And Implementation Of Label-based Electronic Document Control System

The random copy and transmission of electronic document result in the problems of information leakage and interception.Moreover,the confidential matters made by insiders are more serious and more difficult to prevent.The confidential matters made by electronic document also result in the financial loss.However,most companies employ the internal information system for the security protection.Most of the electronic document productions and technologies are based on roles to perform the central control,which depends on the allocated fixed roles and the access authority.Such management method cannot adapt to the changed environmental requirements.Meanwhile,it is also dependent on the simple and fixed access control strategy,which is unable to perform the fine-grained control.The security and flexibility of the electronic document are therefore impaired a lot.The existing productions fail to limit the copy and transmission of document.As long as the document get rid of the internal environment,it is difficult to perform the efficient security control.So the scalability of document transmission is deteriorated.Based on the aforementioned problems,this dissertation designs and implemented a access control system to perform the security control.We propose a fine-grained control mechanism which is dependent on the information of user and environment to achieve the secure control of electronic document.The contributions of this dissertation include the following ones.The label-based access control architecture for electronic document is designed.An identifier-based group encryption and decryption model is proposed.An label-based electronic document control system is achieved.The realistic testing environment is established and the system performance and function are tested.The results demonstrate that the label-based electronic document control system achieves the designed functions and is able to change the access control strategy.Moreover,it can also be applied to the large-scale application.