校园一卡通系统安全模型的构建及应用

校园一卡通系统在高校的应用经历了高速发展的过程,给学校和师生带来便捷的同时,也呈现出纷繁复杂的安全问题。多数校园一卡通系统是从食堂收费系统发展而来,缺少必要的顶层设计和标准规范,其组成模式基本采用搭积木方式整合而成。经多年使用,目前系统的安全不仅牵涉到硬件故障、软件缺陷,还涉及管理问题。本文通过对校园一卡通系统安全模型的构建和对风险来源的分析,在实践的基础上,提出规避风险的应用策略。

Construction and application of the security model of campus card system

The application of the campus all-in-one card system in colleges and universities has undergone a rapid development process,which brings convenience to schools,teachers and students,but also presents numerous and complicated safety problems.Most campus all-in-one card systems are developed from the mess-hall charging system,lacking the necessary top-level design and standard specifications,and their composition mode is basically integrated by building blocks.After years of use,the current system security not only involves hardware failures and software defects,but also management problems.Based on the construction of the security model of the campus all-in-one card system and the analysis of risk sources,this paper proposes application strategies to avoid risks on the basis of practice.