Research On Security Management For Railway Information Sharing Platform

The railway informatization lasting for nearly half a century, tens of different application systems and the portal of China Railway Corporation and12306railway customer services center have been built, which greatly improved intelligent level of railway management and decision-making. But at the same time it also leads to a large number of repeated construction and’information islet’, making it difficult to achieve interoperability between different systems. In order to solve these questions and to better promote the progress of railway informatization, we shall construct railway information sharing platform immediately, however there would be no point if we can’t guarantee the security of the platform. The main contents of this article are as follows:1. Summarizes the types of railway information sharing requirements, and then draw the functional framework and the logical schema of railway information share platform. Select three typical business processes such as real-time data transfer, big data sharing and remote call demonstration the platform security management needs, laying the foundations for railway information sharing platform’s safety management framework.2. Analysis security requirements of platform is the most important thing, Carry out field investigation in Guangzhou Railway Group and Chengdu Railway Bureau, questionnaires to the public at the same time. Basing on the analysis of the survey results, combined with the railway information system using environment and running situation, from the physical layer, system layer, application layer, network layer and management layer analysis and find out the vulnerabilities and weak links of railway information sharing platform. Second, find and predict railway information systems and Information Sharing Platform security threats and security question. Finally, according to the survey results and the analysis predict information sharing platform security threats, dividing railway information sharing platform security requirements into5parts,48categories.3. Security technology deployment is a key step of platform security. From supportive, preventive and restorative three aspects synthetically discusses the security of platform, summed up as follows:access control, cryptography, data disaster prevention and recovery techniques. Giving specific security measures from physical, network, system, application and management.Finally, recommend specific safety product categories according to GBT250662010.