视频监控系统访问控制管理的研究与实现

发布时间：2018-06-30 08:49

本文选题：访问控制 + PKI技术　；参考：《北京邮电大学》2016年硕士论文

【摘要】：随着信息技术的发展和人们对安全的需求越来越高,视频监控技术逐渐出现在生活中的方方面面,如高速公路、街道、超市、学校等。在其基础上建立的视频监控管理系统也就应运而生。但这些大量的应用系统相互之间都是一个独立的个体,它们的系统架构可能各不相同,所采用的实现技术也五花八门。无法有效的进行系统间的资源共享与跨域访问。为了实现不同视频监控系统间的资源共享,保证合法性的访问,需要把各个系统的访问控制策略整合在全局访问控制策略之下,实现统一的访问控制。此外,在信息安全中的一个重要问题是用户的身份识别问题。用户的账号信息可能被其他人所窃取而冒名登录,给系统带来极大的安全隐患。随着公钥基础设施PKI技术的日趋成熟,基于PKI的证书管理系统得到了广泛应用。本文主要对视频监控访问控制系统以及与其他视频监控系统之间的统一访问控制进行了研究与实现。首先对访问控制的核心技术进行了研究,主要研究了基于PKI的证书管理以及针对多系统统一访问控制的单点登录技术。根据实际的业务需求设计了以下的安全策略:系统用户在登录时会跳转到统一的登录界面,然后根据数字证书来识别用户的身份,对通过验证的用户实行基于角色的权限管理,通过数字证书和角色权限管理双重验证来管理系统的访问控制,对于已经登陆的用户可以直接跳转到其他系统而无需再次登录。根据上面的访问控制策略,对视频监控访问控制系统进行了需求分析,给出了系统的概要设计,并且对系统的各个子模块进行了详细设计与实现,然后对系统进行了展示和测试。文章最后对全文进行了总结与展望。本文采用基于PKI技术的EJBCA来实现身份认证子系统,并结合基于角色的访问控制技术RBAC来实现授权管理,同时使用CAS单点登录来实现多域环境下统一的访问控制。后台管理系统采用SSM框架技术和MVC的软件设计模式来完成系统的开发。
[Abstract]:With the development of information technology and the increasing demand for security, video surveillance technology has gradually emerged in all aspects of life, such as highways, streets, supermarkets, schools and so on. The video surveillance and management system built on the basis of the video surveillance technology has emerged as the times require. The system architecture may be different, and the implementation techniques are varied. It is impossible to effectively carry out resource sharing and cross domain access between systems. In order to realize resource sharing among different video monitoring systems and ensure legal access, the access control strategy of each system should be integrated in the global access control policy. In addition, a unified access control is realized. In addition, an important problem in information security is user identity identification. The user account information may be stolen by other people and login to the system, which brings great security hidden danger to the system. With the growing maturity of the public key infrastructure PKI technology, the certificate management system based on PKI is obtained. This paper mainly studies and implements the unified access control between video surveillance access control system and other video monitoring systems. First, it studies the core technology of access control, mainly studies the certificate management based on PKI and the single sign on technique for multi system unified access control. The following security strategies are designed according to the actual business requirements: the system users jump to the unified login interface when they log in, then identify the user's identity according to the digital certificate, carry out role based authority management to the authenticated users, and manage the system by double verification of the digital certificate and the role authority management. The users who have landed can jump to other systems directly without having to log in again. According to the access control strategy above, the demand analysis is carried out on the video surveillance access control system, the outline design of the system is given, and the sub modules of the system are designed and implemented in detail, and then the system is carried out. At the end of this paper, the paper summarizes and predicts the full text. This paper uses EJBCA based on PKI technology to realize the identity authentication subsystem, and combines the role based access control technology RBAC to realize the authorization management, and uses CAS single sign on to realize the unified access control under the multi domain environment. The backstage management system uses SSM Frame technology and MVC software design mode to complete the development of the system.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TN948.6;TP309

【相似文献】