The Design And Implementation Of The Information Security Management System For SMCC

In the course of the development of China Mobile's business support system,the information security management and control system has undergone three phases of construction,providing a unified basic security service technology architecture,centrally managing various IT resources of the business support system and enhancing business support system security and manageable ability.The information security management and control system is located in the core system of security support and provides unified user account,authorization,authentication and audit management to various information application systems of Shanghai Mobile.Through the construction of this system,security management and control ability and practicability of personnel security and system security are realized.With the in-depth application of this system and the importance upgrading of security management,higher requirements have been put on the management and control ability of information security management and control system.Shanghai Mobile staff at all levels put forward more access resources,higher functional performance requirements to this system.Based on the analysis of the actual needs and business processes of Shanghai Mobile and the idea of unified security management and control,the thesis optimized the design and implements the fourth information security management and control system on the existing system.First of all,we discussed the background of this project and the problems it faced in the optimization design,analyzed the functional optimization requirements and non-functional optimization requirements of the System,and described system optimization requirements in form of flowcharts and usecase diagrams.Based on the requirements analysis,we carried out the function and architecture optimization and adjustment of the information security management and control system.Firstly,the system design goals and principles were put forward according to the requirements of system optimization,and then the system technology architecture and function architecture were optimized and adjusted respectively.The former mainly completed the system architecture decoupling,migrated physical resources from physical machines to private cloud resource pools virtual machine,designed and optimized the function of each layer.The latter discussed the functional components of each part of the system,made function module independent,supplemented and improved the functions.Finally,a dynamic system function flow is given.Further we conducted a detailed design of the system optimization needs.The part was designed according to the idea of "unified security control,safe and convenient operation and maintenance",and the optimization design of each module was described.In the system modeling,in order to fully understand the optimal design of the system,we briefly introduced the overall structure of Shanghai Mobile Security Technology System,and then discussed the detailed optimal design of each module in the system according to the idea of "unified security control,safe and convenient operation and maintenance ".In the fourth part of the thesis,based on the detailed design,we briefly introduced the implementation of each module,and gave the overall effect diagram of the system and the realization of each part.Then we focused on a detailed analysis of the implementation content and process of this safety management and control system optimization project.In this part,we first introduced the systematic installation and deployment in project implementation.Secondly,we analyzed the process and the key elements of the project implementation,and showed implementation results.Finally,we briefly summarized the implementation experience.At last of the thesis,we gave a brief introduction to the operation of Shanghai Mobile Information Security Management and Control System and put forward some suggestions for further improvement of the system.In summary,based on the analysis of business optimization needs and the idea of information security management and control,we optimized the design and implemented the information security management and control system for Shanghai Mobile.