成功大學博碩士論文系統

簡易檢索 / 詳目顯示

回結果列表

研究生：	林萬土 Lin, Wan-Tu
論文名稱：	可離線控管身份認證、權限及操作之企業文件以網頁操作為例 Off-line Controlling Authentication, Authorization and Operations of Enterprise Documents using Web Pages
指導教授：	侯廷偉 Hou, Ting-Wei
學位類別：	碩士 Master
系所名稱：	工學院 - 工程科學系碩士在職專班 Department of Engineering Science (on the job class)
論文出版年：	2006
畢業學年度：	94
語文別：	中文
論文頁數：	50
中文關鍵詞：	權限管控、離線、文件、認證
外文關鍵詞：	Authentication, Document, Authorization, Offline
相關次數：	點閱：98 下載：1
分享至:	分享至facebook 分享至twitter

查詢本校圖書館目錄查詢臺灣博碩士論文知識加值系統勘誤回報

為了因應企業的快速成長，企業資訊系統開始廣泛地以Web 架構來設計與建製；此中央化的管理方法降低了學習門檻與維護成本，但資訊系統於離線狀況下卻無法得到一個安全、與操作控管的解決方法。
本論文將就此提出能於離線狀況下，處理安全與控管操作行為之企業文件系統，稱為『任務導向卷宗文件夾』，針對使用XML格式文件，記載安全資訊、文件使用者操作介面、與操作行為的定義。使用者端應用程式依循 XML的定義，去驗證使用者身份、檢查使用者授權清單、控管使用者的操作、使用者介面、與處理管理相關事宜，以確保文件於安全控管下被操作，並且與伺服器資料同步。
本論文並採用平衡計分卡系統為例，實作雛型以評估成效。

Enterprise information systems evolve to introduce Web-based framework. Such a centralized approach is advantageous in reducing the learning curve and maintenance costs. However, web-based applications generally require on-line operations. A solution that make web-based documents can be off-line safely controllable is demanding.
This study proposes a “task-oriented file folder”. A task-oriented file folder only deals with web documents or XML documents. It uses XML to record security (access control) information, the operation interface of users and the definition of behaviors of operations. During off-line processing, an application program, at the user side, is to comply with the XML definitions. It is to verify users’ identification, check the authorization list, and authenticate to perform operations and interfaces as well as to cope with the management of related works. Thus, the document is assured to be securely operated, and the document can be synchronized with the server.
We adopt a balanced score card system as an example to construct a prototype to demonstrate the feasibility of the task-oriented file folder concept and to assess its effectiveness.

第一章	緒論...................................................1
1	研究背景與動機.........................................1
2	研究目標	..............................................3
3	章節概要	..............................................5
第二章	系統分析	..............................................7
1	需求分析	..............................................7
1.1	使用者習慣的編輯界面...................................7
1.2	使用者的身份認證問題...................................8
1.3	使用者的權限問題.......................................8
1.4	使用者編輯文件時操作規範...............................9
2	解決方案...............................................9
2.1	安全問題...............................................9
2.2	系統界面..............................................10
3	環境假設..............................................11
4	驗證情境..............................................11
第三章	系統設計..............................................14
1	系統介紹..............................................14
2	系統部署..............................................14
3	系統使用情境(use case /form)..........................15
3.1	用戶端之使用案例......................................15
3.2	伺服機端的管理使用案例................................26
第四章	系統實作..............................................33
1	系統實作..............................................33
1.1	文件存放格式..........................................33
1.2	編輯畫面與文件代理程式的連線機制......................37
1.3	讀取Smart Card實作....................................38
2	系統展示..............................................41
2.1	操作說明..............................................41
2.2	展示說明..............................................41
第五章	總結..................................................45
1	總結..................................................45
2	未來工作..............................................47
參考文獻.......................................................48
自述...........................................................50

                                    

[1] Digvijay Chauhan, “Smart Cards in .NET Part 1-3”, March 15, 2004 - Nov 15, 2004; available from http://www.aspfree.com
[2] Elisa Bertino , Silvana Castano , Elena Ferrari, “Securing XML Documents with Author-X”, IEEE Internet Computing, Vol.5 Issue.3, pp.21-31, May 2001.
[3] Frank Manola, Eric Miller, “RDF Primer”, W3C, Feb 10, 2004; available from http://www.w3.org/TR/rdf-primer/
[4] J. Clark et al., XML Path Language (XPath) Version 1.0, World Wide Web Consortium (W3C), November 1999; available from http://www.w3c.org/TR/xpath (last visit July 17, 2006)
[5] J. Clark, XSL Transformations (XSLT) Version 1.0, World Wide Web Consortium (W3C), November 1999; available from http://www.w3c.org/TR/xslt (last visit July 17, 2006)
[6] Michiharu Kudo and Satoshi Hada, ”XML Document Security based on Provisional Authorization”, 7th ACM conference on Computer and communications security, pp.86-96, 2000.
[7] R.G. Bartlett, M.W. Cook, “XML security using XSLT”, Proceedings of the 36th Annual Hawaii International Conference on System Sciences, pp.122 –127, 6-9 Jan. 2003.
[8] S. Hoque, H. Selim, G. Howells, M.C. Fairhurst, and F. Deravi, “SAGENT: A Novel Technique for Document Modeling for Secure Access and Distribution”, Document Analysis and Recognition, 2003. Proceedings, Seventh International Conference, IEEE, pp.1257-1261, 3-6 Aug 2003.
[9] Y. Goland, E. Whitehead, A. Faizi, S.R. Carter, D. Jensen, “HTTP Extensions for Distributed Authoring – WEBDAV”, W3C, Feb 1999.
[10] Zhiqun Chen, “How to write a Java Card applet: A developer’s guide”, available from http://www.javaworld.com/javaworld/jw-07-1999/jw-07-javacard_p.html, JavaWorld, July 1999.
[11] “Object-Oriented Application Analysis and Design for Java Technology (UML)”, Sun Microsystems, Inc., March 2000.
[12] OMG Unified Modeling Language Specification version 1.4, September 2001.
[13] “Crystal Decisions Enhances Web Report Creation and Interactivity in Crystal Enterprise”, Business Objects, 8 September, 2003; available from http://www.businessobjects.com/news/presscd/2003/090801.asp
[14] NOVELL Modular Authentication Service, available from http://www.novell.com/products/nmas/ (last visit July 17, 2006)

校內：立即公開
校外：2006-08-29公開

簡易檢索 / 詳目顯示

相關論文