【作者】 徐春林；

【导师】 李涛；

【作者基本信息】 四川大学 ， 计算机软件与理论， 2003， 硕士

【摘要】 WWW服务是Internet应用中应用范围最广泛、最受欢迎的服务。Web服务器，作为WWW服务的核心组成部分，其安全性问题成为目前制约我国WWW服务尤其是电子政务、电子商务发展和广泛应用的一个重要因素。 在SSL和公钥密码技术的基础上，我们提出并实现了基于PKI体系的安全Web服务器。安全Web服务器除了具备通用Web服务器的全部功能以外，同时还提供安全的保密服务。本文实现了安全Web服务器中的安全服务功能。 具体来说，本文的主要贡献有： 1、页面加密存储技术 能够根据服务器端机密信息的不同秘密程度采用不同的加密算法和加密强度对信息进行加密存储，即便黑客入侵，获取的也只是加密过的信息，无法得到有用信息。 2、页面原始性鉴别技术 确保页面内容的原始性、完整性、以及修改后的不可抵赖性，杜绝黑客非法更改页面。 3、分密级访问控制机制 在严格的PKI身份认证基础上，根据内容的重要性和机密程度，对页面按秘密程度进行严格分级，赋予用户相应的权限，网站合法用户也只能访问到他有权访问的内容，杜绝非法越级访问。 4、数字水印日志 在日志中加入数字水印保证日志的原始性和不可更改性，为日志审计提供了强有力的不可抵赖的依据。 5、基于SSL的Web服务器配置管理工具 通过SSL，用户可以在远程放心地对Web服务器进行配置和管理，极 大地方便了用户的使用。 2003年4月25日，“基于“龙芯”的多功能安全WEB服务器及客户端SSL代理程序”通过四川省科技厅专家组鉴定。鉴定委员会一致认为:““基于龙芯的多功能安全WEB服务器”是国内第一款集成智能安全网关、基于工nternet的容灾技术于一体的多功能安全WEB服务器系统，属国内首创。该项目成果整体技术居国内领先水平。该项目成果使我国党政军机关、企事业单位以及学校等在构建自己的安全信息发布平台时有更多的选择，、可以大大降低其信息化工程成本，降低产品使用的难度，增强系统的安全性、可靠性、强壮性等，具有广阔的应用前景。更多还原

【Abstract】 The WWW service is the most popular service in Internet application. Web server is the core of the WWW service, and its security is the most important factor which restricts the application of the WWW service in our country, especially in these fields such as e-government and e-business.Based on the technology of SSL and public key encryption, we put forward and implement the secure web server which is based on PKI infrastructure. The secure web server can not only provide common web service like a usual web server, but also provide secure secretive service. This paper implements the security modules of the secure web server.The main contributions of the paper are as follows:1. storage encryption technicIt can encrypt the information on server side with different algorithm and strength. Even if .the hackers intrude the server, they can only get the ciphertext and can not get the plaintext out from it;2. pages originally identified technicIt can identify web pages, by which we can assure the pages’ originality, integrity and undeniableness, and prevent hackers from modifying pages illegally;3. access control mechanism according access rightsIt can classify web pages by their importance and confidentiality, and give web users proper rights. A valid user can access these pages whoseclassifications are consitent with user’s right. User’s access which is over user’s right is forbidden;4. log system based on watermark technologyIt can add watermark in log record, and protect log record’s originality and unchangeableness. It provides a powerful and undeniable proof for log audit;5. manager tool for secure web server based on SSLIt has designed and realized a flexible, convenient manager tool based on SSL, which facilitates the configuration and management work of the secure web server.On April 25 2003, "a Multifunction Secure Web Server based on GodSon_l and Client SSL Proxy" passed the appraisement of Sichuan Science and Technology Department. Experts of the appraisal council think: "The multifunction secure web server is the first web server which is integrated with intelligent firewall and disaster recovery techniques based on Internet in China, and its technology is the first rank in China. With the secure web server, one can construct a website with high reliability and high security on Internet, and reduce the costs. The secure web server has greate economic benefit and a good prospect of application.更多还原