宝钢eCop-RAS上网认证系统的设计与实现

发布时间：2018-04-21 14:27

本文选题：网络安全 + 身份认证系统　；参考：《电子科技大学》2014年硕士论文

【摘要】：“eCop-RAS(宝信上网认证系统的简称)”是宝信软件股份有限公司为宝钢国际量身定制的宝钢国际ECOP-RAS IKEY智能卡身份安全认证系统,它是宝钢ERP网络销售及管理系统中最为重要的一部分。系统的功能目标是:满足宝钢厂区接入和其它业务间的多业务融合,信息分析共享互动,保证信息的安全化、及使用者的唯一性。推动操作室间信息量的畅通,全自动化的支撑校队;端到端的流程管控;充分考虑个人宝钢国际用户;VIP宝钢国际用户以及高端管理层宝钢国际用户等不同类型的使用者支撑;实现统一的宝钢国际用户视图和数据模型,全面完善的IT架构规划;打造宝钢集团企业信息化标杆;预留标准接口可分步实现信息化战略。通过参与开发网络安全专用的“eCop-RAS上网认证系统”,从而完成企业的网络安全工程设计工作。本文以“eCop-RAS上网认证系统”为对象,主要完成了如下工作:首先,本软件是基于对整个宝钢ERP网络系统进行身份信息安全认证为目的所开发研制的软件,作者通过对宝钢钢铁厂的用户进行调研,以问卷咨询、以及开会分组讨论的形式确认了宝信“eCop-RAS上网认证系统”所需要满足的各项需求以及所要达到的各种条件。其次,经过学习研究后,决定了本次软件系统的设计方案着重采用双重因素的认证,即物理设备认证(IKEY设备)+信息认证的双重认证方法。这是在比较了当前主流的身份认证系统设计的认证方法后,结合对宝钢宝钢国际用户进行征询、调研了解需求的意见,最终敲定了以宝钢国际ECOP-RAS IKEY智能卡硬件为核心认证的eCop-RAS身份安全设计认证方法。通过实现“eCop-RAS身份安全认证”的设计方法,确立了以智能卡一卡通的形式完成宝钢用户对ERP网络系统的访问信息的检索等各权限的设定工作。由于整个ERP系统的过于庞大,作者仅参与了“eCop-RAS上网认证系统”宝钢国际ECOP-RAS IKEY智能卡的网络安全身份认证系统的设计构成架设测试工作,在相关环境下进行了eCop-RAS功能测试,eCop-RAS、eCop-RAS客户端兼容测试,eCop-RAS可用性测试,eCop-RAS性能测试,eCop-RAS易用性测试eCop-RAS安全性测试,系统测试的相关结果、数据证明了所写系统基本达到了宝钢国际用户预期的设计要求。通过上述设计实现工作,本系统秉承着简单使用、安全防护的宗旨,在系统投入使用后,全面的保障了宝钢用户进入宝钢网络系统的安全系数,为网络信息安全加上了保险。其操作的简单化,也受到了用户的一致好评。通过对“宝钢eCop-RAS”身份认证系统的设计与实现体现出当今社会主流的身份认证系统的安全构造,体现出现阶段网络身份认证系统的稳定性与可塑性,为以后系统体系的进化提供了良好的基础。
[Abstract]:"eCop-RAS-Baoxin Internet Authentication system" is the Baosteel International ECOP-RAS IKEY Smart Card identity Security Authentication system, which is customized for Baosteel International by Baoxin Software Co., Ltd. It is Baosteel ERP network sales and management system the most important part. The function goal of the system is to meet the multi-service integration between access and other services in Baosteel plant, to share and share information, to ensure the security of information, and to ensure the uniqueness of users. Promote the flow of information between the operation rooms, fully automated support team; end-to-end process control; take full account of personal Baosteel international users VIP Baosteel international users and high-end management Baosteel international users and other different types of user support; Realize unified international user view and data model of Baosteel, comprehensive and perfect IT framework planning; build enterprise informatization benchmark of Baosteel Group; reserve standard interface to realize information strategy step by step. By taking part in the development of "eCop-RAS authentication system" for network security, the design of network security engineering for enterprises is completed. This paper takes "eCop-RAS Internet Authentication system" as the object, mainly completes the following work: first, this software is based on the whole Baosteel ERP network system for the purpose of identity information security authentication for the purpose of the development of the software. Based on the investigation of the users of Baosteel Iron and Steel Plant, the author confirms the requirements and conditions of Baoxin "eCop-RAS Internet Authentication system" in the form of questionnaire consultation and meeting group discussion. Secondly, after studying and studying, it is decided that the design of this software system should adopt double factor authentication, that is, the double authentication method of physical equipment authentication and IKEY equipment information authentication. This is after comparing the authentication methods designed by the current mainstream identity authentication system and consulting the international users of Baosteel to investigate and understand the opinions of the needs. Finally, the authentication method of eCop-RAS identity security design based on Baosteel international ECOP-RAS IKEY smart card hardware is finalized. Through the design method of "eCop-RAS identity Security Authentication", it is established that Baosteel user's access information to ERP network system should be set up in the form of smart card card. Because the whole ERP system is too large, the author only participates in the design and test of the network security identity authentication system of Baosteel International ECOP-RAS IKEY Smart Card, which is called "eCop-RAS Internet Authentication system". In the related environment, the eCop-RAS function test is carried out in the client compatibility test of eCop-RASE Cop-RAS client. The usability test of eCop-RAS is carried out. The performance test of eCop-RAS is used to test the ease of use of eCop-RAS. The results of the system test are related to the results of the system test. The data show that the system basically meets the design requirements expected by Baosteel International users. Through the above design realization work, the system is adhering to the simple use, the purpose of security protection, after the system put into use, the comprehensive protection of Baosteel users into the network system safety factor, for the network information security added insurance. The simplicity of its operation, but also by the user's praise. Through the design and implementation of "Baosteel eCop-RAS" identity authentication system, the security structure of current mainstream identity authentication system is embodied, and the stability and plasticity of network identity authentication system in emergence stage are reflected. It provides a good basis for the evolution of the system system in the future.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【共引文献】