Design of Security Solution for Web-based Educational Administration System
基于Web的教务管理系统安全方案设计

The security problems of traditional educational administration systems(TEAS) were analyzed. In order to improve their security, a novel integrated solution was proposed. In which, network border protection, user identification and access control, intrusion detection, servers' security, and disaster recovery were presented or strengthened. So the invalid users can be held back, and the exceeding access of valid users can be prevented. At the same time, the new method of Identity-Based Encryption(IBE) can ensure the confidentiality, integrality, usability and the undeniable-ness of the data during the processes of storage, transmission, processing, and so on. As a result, the shortages of PKI, such as the difficulty in managing the public keys, high costs, and low performance can be overcome. Theoretical analysis and the experimental results show that it provides a good security solution to the field of MIS.