To prevent the electrical machine design and simulation platform from the leakage of core technologies of the corporation, this paper proposes a set of rigorous security design schemes. The system architecture adopts a three-tier distributed architecture and applies . Net Remoting technology, and is designed the separation mechanism to separate the system configuration from corporation' s main businesses. The login authentication mechanism specially applies multi-layer registration authorisation besides the user login authentication, log record and password protection. The permission application includes the role-based function privilege and the multi-stage approval confirmation, and focuses on the sector-based and project-based data authority application design and the secret grade filtration mechanism. The software is developed by those technologies including encryption assembly confusion, data integrity verification, transaction rollback, dynamic menu and dynamic button. In particular, the file upload-download encryption and compression technology is emphasised. The corporation' s practical application shows that the safety design in various aspects improves the security and confidentiality of the system.%为了防止电机设计与仿真平台泄露企业的核心技术,构建了一套严谨的安全设计方案.在系统架构方面,采用三层分布式架构和Net Remoting技术,设计了系统配置管理与主业务分离机制；在登录认证方面,除了用户登录认证和监控、日志记录、密码保护外,特别采用了多层防护的注册授权机制；在权限应用方面,实行基于角色的功能权限应用和多级审批确认机制,并有针对性地提出基于部门与基于项目组的数据权限应用设计和涉密等级过滤机制；在软件技术方面,采用程序集混淆加密、数据完整性验证、事务回滚、动态菜单和动态按钮等技术,尤其强调了文件上传下载加密及压缩技术的应用.企业实际应用表明,多方面安全设计提高了系统安全性及保密强度.
展开▼
