雲端ERP安全機制之研究

雲端計算與傳統ERP功能，兩者技術相整合，形成雲端ERP系統，此系統由於顯著量訊息傳送，會加深安全問題的困難度，為了評估當前雲端ERP技術，必需對完整信息安全性問題，加以詳細的規劃與分析。雲端ERP必需提供完整之安全防護機制，包括入侵偵測服務、節點安全性考量，此防護機制包含實體安全及虛擬安全，實體安全主要是儲存媒體資料中心的安全性，亦包括機房安全，而虛擬安全最主要是傳輸的安全與資料存取的安全，在傳輸過程中經過安全性加密算法，例如HTTPS加密機制，來達到傳輸的安全性。而資料存取的安全性，最主要有三項考量，存取安全、資料安全、使用者認證。本研究最主要研究使用者認證方面，運用客戶端用戶認證架構，包括客戶端用戶認證代理機制及雲端用戶認證代理機制，來防止內部與外部攻擊，達到存取代理模式的安全性，以符合雲端多重使用者，安全認證之需求。

關鍵字

雲端計算；傳統ERP ；雲端ERP ；實體安全；虛擬安全

並列摘要

Cloud ERP system is formed by the integration techniques between cloud computing and traditional ERP functionality, both technology. This system faces to a deep degree difficulty of security problems due to a significant amount of messaging. In order to evaluate the current cloud ERP technology, it is necessary to plan and analyze the detailed information security considering completion issue. Cloud ERP must support a complete security protection mechanism, including intrusion detection services and security node detection. This mechanism can provide physical security and virtual security. For physical security, storage media data center is considered on the engine room safety. For virtual security, it is the most important security to achieve transmission security and access data security. Regarding to transmission security, encryption security algorithm can improve the capability for HTTPS encryption mechanism. Regarding to the security of access data, three main factors can be considered, including access security, data security, and user authentication. The research is to construct client-based user authentication mode that has client-based user authentication and cloud-based user authentication mechanisms. The major purpose of this mode is to resist inside and outside attacks for achieving the security of access control agent, and satisfy with security certification requirements for multiple users in the cloud.