航海模拟器论文：航海模拟远程培训系统安全机制研究.docVIP

航海模拟器论文：航海模拟远程培训系统安全机制研究 【中文摘要】当前社会良好的信息基础设施已经建设完成,信息网络及其设备普及程度和覆盖率都极大提高,驱动各行业向着高效率的信息化、电子化发展。使用功能完备的大型航海模拟系统进行驾驶员的教学和培训,在航海教育中起到了重要的作用。基于高速网络的航海模拟远程培训系统为学员自由学习提供了一个辅助平台。利用当前的信息化环境,让航海模拟培训系统搭上Web这个快速发展的平台,建立基于Web的航海模拟远程培训系统,可弥补传统模拟器培训人数、场地受限制的不足。同时,2010年STCW公约马尼拉修正案中细则第B-I/6节关于培训和评估的指导新增了“远程教学和电子教育的使用”内容。目前投入使用的Web航海培训系统还相对较少。在分析前人研究成果的基础上,本文着重从数据安全、对知识产权保护的角度出发,通过分析信息安全的发展和密码学在网络平台上的应用,整体上把系统应用需求和安全需求分离；把应用功能从逻辑上分层,分析各层可能面对的风险,制定相应的安全实施策略。采用传统的B/S开发方法,使用Apache-tomcat作为应用服务器,Mysql作为后台服务器,并采用了一些安全框架技术,对各层设计安全架构,结合密码学技术构建安全传输管道,同时结合硬件设计身份认证模块,分析了后台数据库和基础设施的安全问题并加以部署。增强了航海模拟远程培训系统的网络安全性,为航海模拟远程培训系统提供信息安全保障,为进一步大规模应用打下一定的基础。 【英文摘要】At present, we have finished constructing information infrastructure. Kinds of industries developed rapidly, Marine Simulator plays a very import role in maritime education and training. With web-enabled Marine Simulation System student can run exercises on their own, as a result training is no longer confined to the walls of school or scheduled class times.Take advantage of this stunning environment, navigation simulation system should catch web platform which rapid developed, web-based marine simulation training system, could alleviate tight supplies of navigation simulators. At the same time,2010 STCW Convention in Manila amendment, Rule B-I/6 have been improved with additional specifications and options. These content are about education or training delivered over the internet. But few systems put in use.On the basis of the predecessors抮esearch, this paper focuses on security, outlined the development of information security and cryptography applications on the network. From a security perspective, separate system application features and security features, analysis risk of different layers, and develop appropriate security methods. Adopt B/S development methods, and Apache-tomcat as application server, Mysql as background database. Use of security framework, build security architecture at different layers and combine with cryptography te