电子邮资的研究和应用

【作者】 唐建中；

【导师】 王加阳；

【作者基本信息】 中南大学 ， 计算机应用技术， 2002， 硕士

【摘要】 电子邮资是指邮政通过互联网提供邮资服务，用户通过因特网向邮局购买邮资，并在本地打印出被邮局认可、跟普通邮票具有相同作用的邮资凭证，用以寄信和邮寄包裹等。电子邮资是传统邮政跟互联网结合而形成的新的邮政服务。研究和发展电子邮资系统，将大大改善邮政服务方式和服务质量，加强邮政资费的管理，促进邮政事业的信息化。 本文研究讨论了电子邮资系统的离线和在线两种服务模式，主要研究了离线电子邮资系统，建立了离线电子邮资系统的多层次、分布式体系结构，具有安全性、实用性和良好的可扩展性等优点。在此基础上，重点研究了邮资存储盒设计、邮资续费、防伪邮资凭证设计和系统后台安全体系等实现电子邮资系统的关键技术。 邮资存储盒用来存储用户购买并下载到本地的邮资，它的安全是电子邮资系统安全的基础。本文研究并选择信息安全产品iKey为邮资存储介质，结合CryptoAPI技术构建电子邮资安全加密体系，给出了邮资存储盒的设计方案，并分析了方案的安全性和可行性。 邮资续费是邮政用户到提供电子邮资服务的网站购买邮资并将邮资下载到邮资存储盒中的过程，从业务逻辑处理上分为身份认证和安全交易两个部分。文中研究了iKey内置MD5—哈希函数的特性，设计了基于iKey的挑战／应答身份认证技术，该身份认证技术具有安全性好、容易实现等优点；以数据加密技术为基础，设计了邮资续费安全交易流程；并以ASP技术为支持平台，用COM技术封装上述业务逻辑，给出了邮资续费在WEB上的实现方案。 邮资凭证是电子邮资系统服务的最终体现，邮资凭证的安全是保证电子邮资系统正常运转的重点。本文采用二维条形码为信息载体，用密码防伪技术在邮资凭证中隐含邮件信息，设计出防伪、防重用、能够满足机器识别和邮件自动化分拣的邮资凭证。 后台系统的安全是信息系统安全的保证。文中通过建立系统操作人员的操作日志，以监督和约束操作人员的行为；以RBAC模型为基础，研究实现系统的权限分配和管理方案，从而搭建起电子邮资系统的后台安全体系。更多还原

【Abstract】 E-Postage(Electronic Postage) is a kind of service on Internet provided by post: Users buy postage from post department through Internet, and print out electronic stamps at local area which is admitted by post and can be used as ordinary stamps. E-Postage is a new postal service come into being with the combination by traditional post with Internet. The research and development of E-Postage system, not only can improve the service manner and quality of post, strengthen the management of postage income, but also can accelerate the information reform of post.The paper first studies and discusses offline-consuming service mode and online-consuming mode of E-Postage system ,then focuses on the study of offline-consuming E-Postage system and establishes multiple level and distributed architecture of E-Postage system, which is secure, practicable and well-scalable. On the base of this architecture, key techniques to realize E-Postage system are studied, which include the design of postage-storage and stamp ^ secure postage renewing transaction and the foundation of secure background system.Postage-storage is used to store and protect postage users buy and download to local area, its security is the basis of the whole system. The paper studies and chooses iKey as the medium to store postage, founds the secure cryptographic system by using CryptoAPI technique, then gives a scheme of postage-storage, analyzes the security and practicability of the scheme.Postage renewing is a process that postal users buy postage at the E-Postage website and download and store postage into postage-storage. The process is divided into two parts as user identity authentication and secure transaction according to business disposal logic. The paper designs out challenge/response identity authentication technique based on the MD5-Hash function of iKey, which is secure and easy to carry out; designs out secure postage renew transaction at the basis of cryptography; then gives out a solution for the realization of postage renewing on the WEB by using ASP and COM.Electronic stamp is the final embodiment of E-Postage service, the security of stamp is key guarantee for the E-Postage system. The paper designs out anti-discriminate and anti-reuse stamp by the application of two-dimensional Bar Code and cryptographic anti-discriminate technique ,which is machine readable and satisfied for automatic selection of mails.The security of background system is the guarantee for the whole information system. By Building operating log to supervise and restrict the behaviors of system operators and studying privilege authorization and management of E-Postage system based on the theory of RBAC, secure background system of E-Postage isfounded.更多还原