Research On Security Strategy For Railway Information Sharing Platform Based On SOA

After decades of development, China's Railway Information process has made considerable progress, which brings us a large number of business information systems, such as TMIS and Tickets systems, and meanwhile promoted the development of railway modernization effectively. However, the existing information systems are basically independently developed, causing great waste of information resources. As a result, it is a major issue in China's railway information process, to construct railway platform for information sharing and improve the information system as a whole.Service-oriented architecture (SOA) has an important guidance value in the heterogeneous systems integration and application systems integration. But before specific design and implementation, we should consider the security strategy as the major problem to be solved first. Without well-designed security strategy, the platform will suffer from a series of security accidents, such as the lost of sensitive information, the tempering of important communication and the counterfeit of user identity. At present, researches and applications on such issues are still on the initial stage. Therefore, it has great academic value and practical significance to have in-depth study on the security strategy on the railway information-sharing platform constructed with SOA security architecture.In this paper, with analysis of overall network security situation and the characteristics of the information system, the security needs of all levels on the information-sharing platform is put forward, and the security problems to be solved is proposed. Based on related security concepts, practices and protocol standards, this paper puts security technology into the information-sharing platform, and makes detailed research on the design of the platform security strategy framework, the level of protection and access control strategy. Meanwhile, this paper also brings forward the strategies for the evaluation and implementation of recommendations. Finally, a system simulation is given to show the implementation of a security access control system.