【作者】 邱旭峰；

【导师】 郭顺生；

【作者基本信息】 武汉理工大学 ， 通信与信息系统， 2006， 硕士

【摘要】 随着经济全球化的进一步加快,越来越多的企业采用ERP等先进的管理信息系统来参与全球竞争。作为先进的企业管理信息系统的代表,ERP管理信息系统能够为企业降低生产成本,提高劳动生产率,共享资源等。但在享受ERP管理信息系统带来的开放和自由的便利同时,我们还必须面对信息安全的挑战。 ERP信息管理系统软件的安全性是中小型企业在实施ERP系统时必须考虑的问题。对于信息系统的安全性一般包括:数据完整性、数据保密性、身份确认和认证、访问控制、不可否认性等几个方面。 本论文以作者参与开发的“广东佛山光电器材公司企业资源计划系统”为实例,从以下几个方面对系统的安全性进行了详细的研究,并对系统的访问控制、身份确认和认证、数据保密性进行了设计。通过一段时间的验证,系统的安全性取得了初步的成效。 1.阐述了ERP系统的基本原理、管理思想、结构体系与功能:结合计算机技术、网络技术、管理技术的发展,总结了ERP系统发展趋势的结论。 2.描述了计算机系统安全的定义和目标,讨论了涉及计算机安全的一些关键技术,包括:基于角色的访问控制(RBAC)、加密技术、VPN技术、防火墙技术和入侵检测技术。 3.分析了ERP系统的安全需求和安全性,其中对B/A/S(Browser/Application/Server)三层模式下ERP软件系统的安全问题进行了深入的研究和探讨;分析了佛山光电器材公司ERP系统方案。 4.针对佛山光电器材公司ERP系统存在的安全问题提出了一个基于角色的访问控制(RBAC)技术与MD5算法的ERP系统安全解决方案,并通过C++Builder6.0工具和SQL Server数据库实现了这一解决方案。 5.针对现在ERP系统存在的网络安全问题,提出了一个基于VPN技术和防火墙技术的安全模型,为进一步研究ERP系统的安全问题提供思路。 论文最后总结了全文的工作,并对本课题未来的研究进行了展望。更多还原

【Abstract】 With the rapid development of economic global, more and more Enterprises join the global competition by adopting advanced management information system, such as Enterprises Resource Planning (ERP). As a representative of the advanced Enterprise Management Information System, the ERP system could reduce produce cost, improve labor productivity and share the resource and so on. While enjoying the convenient of opening and freedom brought by the ERP system, we must face the challenge of information security.The security of ERP information management system was considered firstly when the small and medium enterprises implemented ERP system. The security of the information system generally included Data Integrity 、 Data Confidentiality 、 Authentication 、 Access Control 、 Non-repudiation and so on.The paper took the ERP system of "GuangDong FoShan Photo-Electricity Corporation" the author had anticipated and designed as an example. The paper studied particularly the system security in the following several aspects and designed the access control, identity acknowledgement and authentication and data secrecy. Verified for some time, the system security had made primary progress.1. To set forth the primary principle, management idea, frame system and function of the ERP system. Combining the development of computer technology, network technology and management technology, the paper summarized the conclusion of the development trend of the ERP system.2. To describe the definition and target of computer system security, and to discuss some important technology on computer security, including the RBAC (Role-Based Access Control)、 the Cryptology、 the VPN (Virtual Private Network)、 the firewall and the IDS (Intrusion Detection System ) technology and so on.3. To analyze the safety requirement and security of the ERP system. Especially, the security problems of ERP system based on the B/A/S(Browser/Application/Server) three-layer model were deeply researched and discussed. Finally. To analyze the ERP system project of FoShan Photo-Electricity corporation.4. Aimed at the safety problems existed in the ERP system of FoShan Photo-Electricity corporation , putting forward a security resolving project of the ERP system on the base of the RBAC technology and MD5 algorithm, which was realized by applying C++ Builder6.0 and SQL Server database.5. Aimed at the network safety problems existed in the ERP system, putting forward a safety model on the base of the VPN and the firewall technology, which provided ideas for further studying the safety problems of the ERP system.Finally, the conclusion was summarized and the developing trend was forecast.更多还原