安全電子公文系統架構之研究與設計

A Study and Design on Secure for Electronic Documents System Framework

吳寶源(Pao-Yuan Wu)

指導教授 ： 李錫捷

元智大學/管理學院/資訊研究所/碩士(1999年)

摘要

傳統的公文作業是以紙張為主，存在著許多問題，如資料遭竄改、公文流向不易掌握、密件公文存檔等，電腦科技的運用雖然可以解決上述問題，但仍存在一些技術及應用上的問題。由於網際網路及全球資訊網技術的成熟，正好提供一個允許多人使用、跨越時空、標準化的分散式使用環境，使分散各地的辦公室成員之間，能以簡易的方式交換、傳遞及分享資訊。但是在此環境中對於建構一個電子公文系統，在公文流程模型、角色辨認與授權、系統執行安全性等方面仍存在許多問題，因此本論文將針對上述幾個問題加以探討，利用密碼學理論及工作流程模式，提出一個Internet上安全電子公文系統的架構，讓企業的公文流程達到自動化的境界，以大幅減少原來利用傳統方式執行公文傳遞的成本與時間、有效地整合組織資源，進而提昇企業的經營效率和競爭優勢。

關鍵字

電子公文 ； 密碼學 ； 全球資訊網 ； 網際網路

並列摘要

Traditional document processing is mainly done through paperwork. There exits several problems in it, such as, unauthorized changes of document contents, flow out-of-control during document circulation, and the document confidentiality. Information technology has helped greatly but not fully solved these problems yet. The emerging technology on Internet and World Wide Web suggests the idea of virtual office that provides a multi-user, standardized, and distributed environment that highly eliminated the affects of time and space. The idea of virtual office makes it possible for people in various locations to easily exchange, deliver, and share ideas, documents, and information. Nevertheless, issues regarding the security during document circulation, user identification and authorization, and system workflow design are still the major concerns while establishing an electronic documents system on the Internet. In this study, a prototype system is designed and implemented in an attempt to solve the problems mentioned. By using techniques such as, public key infrastructure, cryptography, and workflow model, the electronic documents system is implemented on the Internet with Secure Sockets Layer support. The system is designed to automate the document transmission and flow-control that in term will massively reduce the cost and time of document processing. It is also designed with security in mind that will keep the confidentiality of documents both on their storage and during their transmission.

並列關鍵字

Electronic Documents ； Cryptography ； World Wide Web ； Internet

參考文獻

6. 行政院秘書處，文書處理檔案管理手冊，民國八十七年。

12. R. L Rivest., A. Shamir, L.M. Adleman. ,“A Method for Obtaining Digital Signature and Public-key Cryptosystems “, Communication of ACM, v.21, n.2,Feb 1978, pp. 120-126

13. T. ElGamal, “A Public Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms”, Advances in Cryptology: Proceedings of CRYPTO 84, Springer-Verlag, 1985, pp. 10-18

15. R.L. Rivest, “The MD5 Message Digest Algorithm”, RFC 1321,Apr 1992.

20. National Institute of Standards and Technology, NIST FIPS PUB 186, “Digital Signature Standard”, US Department of Commerce, May 1994.