線上服務的資訊安全－以大學網路選填志願為例

Information Security of On-line Service-The Example of Application on Enrollment for College Admission

賴溪松(Chi-Sung Laih) ； 孫明功(Ming-Kung Sun) ； 郭建邦(Chien-Pang Kuo)

《檔案季刊》 5卷3期 (2006/09) Pp. 1-12

摘要

民國94年，成功大學計算機與網路中心及電機系資訊安全團隊承辦了我國首次大學選填志願網路作業，經過一年的規劃、設計與實作，約10萬名考生透過網路完成其選填志願工作，圓滿成功。本文將介紹大學網路選填志願之正確性與安全暨相關作業，並可達到網路選填志願的4個重要目標：可用性、安全性、完整性與公平性。經由本次活動，我們證明，以大學選填志願如此重要的工作，在確保選填志願檔案安全無虞的條件下，亦能夠透過線上的方式服務廣大的社會大眾。我們深信藉由檔案管理與資訊安全機制的建立，逐漸提供線上服務，為一般社會大眾帶來廣大的福祉。

關鍵字

大學選填志願網路作業 ； 資訊安全 ； 線上服務

並列摘要

In 2005, the staffs of Computer & Network Center and Information Security Group, which belong to the Department of Electrical Engineering of National Cheng Kung University, took the responsibility for on-line application on enrollment for college admission. That was conducted for the first time in Taiwan. After one-year planning, designing and implementation, there were about a hundred thousand examinees that have successfully completed the procedure on-line. The article introduces the mechanism ensuring the validity and security of application on enrollment for college admission on-line as well as other relevant operations. In addition, four significant objectives: usability, confidentiality integrity and fairness are also discussed. The team has proved that, an extremely important task as enrollment for college admission could also be proceeded on-line without worries about information security. The team also believes that various archive services from government agencies could be provided on line with the help of information security system.

並列關鍵字

application on enrollment for college admission ； information security ； on-line service

參考文獻

鄭毓芹、陳威宇、林敬皇()。,未出版。

林敬皇、賴溪松()。

賴溪松主編(2005)。資通安全專輯之十四一網路攻防實驗教材。財團法人國家實驗研究院科技政策研究與資訊中心。

郭建邦、賴溪松()。

聯合分發委員會()。