在线招投标Web系统安全结构及关键技术的研究

分析了网上在线招投标系统的安全性需求，提出了一种新的用于在线招投标Web应用系统的四层安全体系结构，并定义了其各层次的功能，描述了其安全认证过程，解决了传统三层体系结构在信息系统的安全性上存在的问题和不足。同时就系统中的数据安全性、系统的认证等关键安全技术，综合应用加密和Hash算法，给出了一种在传输和存储过程中保护数据的保密性和完整性的设计方法，以防止在数据库的应用中数据被非法窃取和篡改；给出了一种基于网上在线招投标系统的不可否认数字签名认证方案，使得可在不暴露用户安全信息的前提下实现其身份认证。

Research of security architecture and key technology for web system based on online bidding

On the basis of analyzing the security demands of the online bidding system, a new four-layer security architecture for Webapplication system based on the online bidding is presented, and the security authenticating and functions of each layer is also defined,the insufficiencies on security problems in the traditional three-layer architecture are solved. With encryption and hash algorithm, a kindof design method is given for protecting data security and data integrity in the course of transmitting and storing in order to prevent thestealing and juggling of data; a undeniable digital signature scheme is given which make an authentication system to validate a user'sidentity without exposing the user's secret information.