Design Of Government Data Open Platform And Security Solution Based On Hierarchical Access Control

In recent years, government data open becomes more and more popular in theinternational community. In order to protect citizens’ rights to known and raise itsprestige as well, government disclosure their own data to the general public andcommunity organizations for free. With the development of information technology,government data open has gradually platformlize. Building an security governmentdata open platform has already become one of the current prior consideration for eachcountry and local government.Government data open platform provides many varieties of services. The webportal for public shall be the first to be consided in the platform. Citizens can search,view and download government data through the website conveniently. In order toachieve the purpose of data use maximum, the third-party developers are able todevelop applications with government data, which can make more convenient accessto government information.Compared with normal data open platform in business area, there are somecertain peculiarities in government data open platform, such as the difference ofcollaboration forms, higher requirement of data secutity, etc. Therefore, a completeplatform architecture and a reliable security solution shall be designed to realizesecure government data open. Due to the lack of security standard and incompletenessof platform architecture, this paper carried out the following research work.Firstly, this paper focuses on the current development of domestic and foreigngovernment data open platform such as the United States, Britain, Germany and Beijing, Shanghai, and also ananyzes the security problems of government data openplatform from two aspects. The related technologies and secutity mechanisms areintroduced for the platform design work.Secondly, based on the analysis of the platform fuctional and securityrequirements, a complete platform architecture and its security solution are given inthis paper. Considering the specificity of government data, government Open API isdesigned based on the REST architectural style. To realize the security API functioncall of third-party applications, according to the security access control, this paperdesigns the hierarchical access control mechanisms. Secure authorization based onOAuth protocol is also designed in order to protect user data privacy. The applicationmanagement function is realized, including application security test, security access tothe platform and security control.Finally, we achieve the realization of system security module and verify part ofthe security mechanism and function.