多功能打印机（MFP）系统管理及通信安全研究

发布时间：2019-04-13 17:52

【摘要】：在数码技术高速发展的背景下，在文档电子化处理、运营成本的控制、环保意识提高等各种诉求下，多功能打印机孕育而生。伴随多功能打印机应用普及，与之相关的安全问题也随之日趋突出。针对多功能打印机在充当数据处理终端和网络服务平台角色时所遭遇的安全问题,本文展开分析并力图通过研究弥补和改善其使用过程中所存在的安全隐患。首先针对企业常见的行政制度和IT环境进行分析，阐明一些必要制度和IT管理的缺失将会给多功能打印机的使用安全带来隐患,并通过研究来确定制定针对多功能打印机合适的管理制度来保障可靠运行的环境基础。然后基于具体的多功能打印机型号作为研究模型，在具体的系统管理、数据存储方面进行分析，，通过文档处理方式的合理改变实现流程优化、账号权限分级和账号域管理等方式介入实现权限集中统一管理、并通过标准硬盘覆写、对称加密等AES技术的研究弥补或改善系统硬盘数据存储中的泄露隐患。同时对多功能打印机流经文件的传输通讯方式进行分析研究，发现多功能打印机在经常使用到的FTP协议和SMTP协议和被用来远程管理的HTTP协议存在信息泄露存在遭受攻击的可能,尝试通过安全套接层SSL技术的使用,来加密相应的通讯过程,保证传输过程中的信息安全可靠。最后,对于多功能打印机正在面临的各种安全现状,进行安全设计前后的对比测试来检验设计是否达到预期效果，验证理论成果。在论文的最后章节中，根据真实客户多功能打印机现实使用情况和未来的安全期望进行分析，找出存在的问题，并将前阶段研究中行之有效的设计应用于客户的实例中进行尝试。在客户项目完毕验收时，对整个项目实施前后效果进行综合对比和总结，证明论文中的研究设计在使企业中的多功能打印机得以更合理应用的同时，又能保证不会成为拖累企业网络安全级别的新薄弱环节，同时经其流转的数据信息也安全可靠，并且具有理论结合实际的可用性。
[Abstract]:Under the background of high-speed development of digital technology, multi-function printer is born under various demands such as electronic document processing, operation cost control, environmental protection awareness and so on. With the popularization of multi-function printer application, the security problems related to it are becoming more and more prominent. In view of the security problems encountered by the multi-function printer when it acts as the data processing terminal and the network service platform, this paper analyzes and tries to make up and improve the security hidden trouble in the process of using the multi-function printer. Firstly, this paper analyzes the common administrative system and IT environment in enterprises, and clarifies that the lack of some necessary system and IT management will bring hidden trouble to the use security of multi-function printer. And through the research to determine the appropriate management system for multi-purpose printer to ensure reliable operation of the environmental basis. Then based on the specific multi-function printer model as the research model, this paper analyzes the specific system management and data storage, and realizes the optimization of the process through the reasonable change of the document processing mode. Through the research of AES technology such as standard hard disk overwriting symmetric encryption and so on make up or improve the leakage hidden trouble in the system hard disk data storage. At the same time, the transmission and communication mode of the multi-function printer through the file is analyzed and studied. It is found that the multi-function printer may be attacked in the common use of the FTP protocol, the SMTP protocol and the HTTP protocol used for remote management. This paper attempts to encrypt the corresponding communication process by using secure socket layer (SSL) technology, so as to ensure the security and reliability of the information in the process of transmission. Finally, the multi-function printer is faced with a variety of security status, the security design before and after the comparative test to verify whether the design has achieved the expected effect, verify the theoretical results. In the final chapter of the paper, according to the real customer multi-function printer actual usage and the future security expectation to carry on the analysis, to find out the existing problem, At the same time, we try to apply the effective design in the previous stage to the customer's example. At the completion of the customer project acceptance, comprehensive comparison and summary of the results before and after the implementation of the whole project proves that the research and design in the paper not only makes the multi-function printer in the enterprise more reasonable application, but also at the same time. It can also ensure that it will not become a new weakness in the network security level of enterprises, and that the data information transferred through it is also safe and reliable, and has the usability of combining theory with practice.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP309;TP334.8

【参考文献】