| Internet of things,big data,cloud computing and other new technologies have been widely used in logistics information system,to improve the transparency of logistics information and service level.At the same time,the openness of the network,and distributed environment of logistics system have brought many risks and uncertainties to the logistics information security.The implementation of information security has become a problem which urgently needs to be addressed for logistics enterprises.In this paper,an integrated logistics information security mechanism is built through a variety of security strategies,and the related information security technology is researched.The main work of this paper is as follows:(1)Integrated logistics information security mechanism is constructed.For the key information security problems of logistics information system,the integrated logistics information security mechanism is constructed from the system data security and system external environment security.The data encryption technology is used in in the whole life cycle of the logistics business data,with the system access control strategy and disaster recovery system to enhance the logistics information security.(2)The security strategy of logistics information system is researched.Three layer information security protection system is built under data collection and coding encryption,database storage security,and data security transmission.Taking QR Code as logistics information carrier,the RC4-RSA hybrid encryption algorithm is put forward to realize dynamic data encryption of logistics data in each link of the supply chain.Aiming at the problem of weak keys in the RC4 algorithm,the chaotic map is introduced into the pseudo-random key generation process.Using the public key of the RSA algorithm to solve the RC4 key management problem,it enhances the security of dynamically generating QR Code coding.In the process of data transmission,a secure transmission channel is constructed on HTTPS protocol,to realize the authentication of the server,the encryption of the data transmission process and the verification of the final information integrity.(3)The external environment security mechanism of logistics information system is researched.An extension model of access control based on RBAC is built,which proposes a hybrid authorization mechanism based on user and role.In view of the complexity of role assignment,the grouping and time constraints are introduced to improve the dynamic control of role permissions and increase the flexibility of user access control.For the logistics enterprises,the disaster recovery system based on virtualized storage to improve the disaster prevention ability of the system,and turn the traditional data protection mode to the data,business fast recovery mechanism.(4)Based on the background of aquatic logistics traceability system,the integrated information security mechanism is integrated,and the RC4-RSA hybrid encryption algorithm is validated.The integrated information security mechanism improves the information security of the logistics information system,which has a certain degree of reference significance. |