Design And Implementation Of Secure FTP System Based On Digital Certificate

Hainan Technical Investigation Corps is directly under the Hainan Provincial Public Security Department,which is mainly engaged in criminal proceedings of technical investigation activities.Technical investigation for criminal investigation often play a multiplier effect,find out the facts of the crime,has emerged as an important new way of criminal investigation,and has been used in practice to varying degrees in all countries.Compared with the traditional investigative techniques,technical investigation has secrecy,high consequent and high-tech.Most current domestic Technical Investigation department collected information,mainly use e-mail,FTP and file sharing tools etc.for file sharing between users,exchange and circulation.In these electronic document exchange,the user usually use "username / password" login system,even parts of the system can log on anonymously,leading to difficult to trace the true identity of the logged in user;these systems are usually transferred in plain text file,an attacker can listen to over the network steal the file data,so file transfer security is poor;systems usually stored in the clear file,an attacker can easily get to these centrally stored files,so file storage security is low;system mainly by account behavioral audits,safety problems,so the user's behavior is difficult to trace their responsibility.Contents of this system are as follows:(1)Background and application value of this system is analyzed in the context of the existing transmission system to share files with a security risk,and proposes the use of digital signatures and SSL protocol approach to the design study of the system.(2)For the problems exist in the system and the status of work in Hainan Technical Investigation Corps,this paper raised the overall needs of the system,business requirements analysis,functional requirements analysis and non-functional requirements analysis.According to functional requirements analysis,this system is divided into login certification,document management,monitor and audit,and server configuration four subsystems.(3)Under the guidance of the needs analysis,the overall design of the system proposed design principles,on the basis of analyzing the overall architecture design architecture,respectively,from the functional structural design,network topology design,DBD(Data Base Design)and hardware design for safety system will be explained.(4)Traction of the overall design,a method using a class diagram of the four subsystems interior design and complete realization of the system on the Open SSL development platform.(5)The deployment and testing of the system,from the test content,test methods,test environment,functional testing and performance testing perspective to test all aspects of system operation,and in the case of multi-user concurrent operation,the system run more stable,meets the design requirements for the beginning of the performance requirements.Currently,the system is already on line,in which Hainan Technical Investigation Corps office network has been able to secure delivery of electronic documents,sharing and storage.