基于C/S结构的网上阅卷签名认证系统研究
|
摘要
计算机网上阅卷作为近年来我国考试领域的重大改革，受到社会的广泛关注，但也存在一些问题尚需解决。目前，评卷管理都采用基于密码管理的模式，但当个人密钥丢失后存在身份无法认证或发生身份欺诈无法追溯的问题。现代计算机签名认证技术的发展为电子签名的推广提供了可能，网上阅卷过程中评卷人采用签认证技术，为以后进行错误追溯提供真实证据。
在认真分析总结国内外在线签名认证技术基础上，论文从网上阅卷系统开发的背景和必要性入手，应用面向对象技术对系统进行总体的设计和实现。采用Visual C++6.0完成组件平台建设，后端数据存储是当前流行的SQL Sever 2005数据库。首先通过对网上阅卷在线签名系统综合分析，建立合理的子系统模型。针对传统两层C／S体系结构，在效率、安全性、可靠性、稳定性等方面的不足，设计了基于三层C／S体系结构系统方案，并进行了系统架构。
本文分析了签名认证系统服务器的设计，包括数据库服务器设计和应用服务器的设计。数据库服务器的设计包括数据表和触发器的设计，并讨论了签名数据库的组成，即真实签名库和伪造签名库，对签名样本库的更新提出了解决方案。考虑系统的安全，实现了对数据库中一些敏感字段进行了加密。应用服务器的设计中，开发一个ATL的COM组件，实现与数据库的连接、查询、插入、删除等操作，设计了一些接口并实现了这些接口函数。
通过计算机多层结构理论，COM／DCOM技术、数据模块技术等程序开发技术，完成了签名认证系统客户端的设计，包括客户端与服务器之间通信机制。论文对签名认证系统的主要模块进行了设计，包括系统管理模块、签名注册模块、签名认证模块、签名图象隐藏模块。在系统管理模块中，设计了权限管理、日志管理、系统设置等子模块。在论文最后，抽取了部分有代表性功能模块进行了测试，测试效果良好。
通过签认证技术的使用，确保了网上阅卷的安全性、真实性，增强了阅卷者的责任心，改善了网上阅卷的质量。
As an important reformation of examination domain in china, network grading has been taken broad notice by the society, though it also exist some problems for us to solve. At present, network grading management is based on password management mode, the existing status will be unable to identify or the status cheat will be unable to trace if the key is lost. Profit from the development of signature verification technology which makes the promotion of electronic signature possibly, remarking people can provides the real evidence for error tracing.
Under the research and analysis of the On-line handwriting signature verification, this paper, which starts with development background and necessity of the network grading system, applies the object-oriented technology to design and realize the system base on Visual C++ 6.0 platform and SQL Sever 2005 database. At the beginning of this paper, a reasonable subsystem model is established by researching network grading of signature verification, then puts forward the solution based on 3-tier C/S structure and designs the framework of the system in view of the insufficiency of efficiency, security, reliability, stability about traditional based on 2-tier C/S structure.
The sever's design of signature verification system is analyzed, including application sever and database sever. To the database sever, the design of datasheets and the trigger are introduced, the composition of signature database including the library of real signature and forged signature is discussed, and a new solution to deal with the renewal of the signature sample library is proposed. Considered the security of the system, some sensitive fields in database are encrypted. To the application sever, a COM module of ATL is developed to let application sever realize the operations of connection, inquiry, insertion, deletion with database. Furthermore, some interfaces are designed and the interface functions are realized.
Through the theory of computer multilayer structure, COM/DCOM technology, data module technology, and other program development technology, this paper has completed the client's design of signature verification system, including communication mechanism between clients and sever. The signature verification system is composed of system management module, signature registration module, signature verification module, images hidden module and something else. In the system management module, the sub-modules such as the rights management module, log management module, system settings module are designed. At the end of this paper, some typical modules have been validated, which show well performance.
Benefit from signature verification technology, the safety and authenticity of network grading are guaranteed, the sense of responsibility to remarking people is increased and the quality of the network grading is improved.
在认真分析总结国内外在线签名认证技术基础上，论文从网上阅卷系统开发的背景和必要性入手，应用面向对象技术对系统进行总体的设计和实现。采用Visual C++6.0完成组件平台建设，后端数据存储是当前流行的SQL Sever 2005数据库。首先通过对网上阅卷在线签名系统综合分析，建立合理的子系统模型。针对传统两层C／S体系结构，在效率、安全性、可靠性、稳定性等方面的不足，设计了基于三层C／S体系结构系统方案，并进行了系统架构。
本文分析了签名认证系统服务器的设计，包括数据库服务器设计和应用服务器的设计。数据库服务器的设计包括数据表和触发器的设计，并讨论了签名数据库的组成，即真实签名库和伪造签名库，对签名样本库的更新提出了解决方案。考虑系统的安全，实现了对数据库中一些敏感字段进行了加密。应用服务器的设计中，开发一个ATL的COM组件，实现与数据库的连接、查询、插入、删除等操作，设计了一些接口并实现了这些接口函数。
通过计算机多层结构理论，COM／DCOM技术、数据模块技术等程序开发技术，完成了签名认证系统客户端的设计，包括客户端与服务器之间通信机制。论文对签名认证系统的主要模块进行了设计，包括系统管理模块、签名注册模块、签名认证模块、签名图象隐藏模块。在系统管理模块中，设计了权限管理、日志管理、系统设置等子模块。在论文最后，抽取了部分有代表性功能模块进行了测试，测试效果良好。
通过签认证技术的使用，确保了网上阅卷的安全性、真实性，增强了阅卷者的责任心，改善了网上阅卷的质量。
As an important reformation of examination domain in china, network grading has been taken broad notice by the society, though it also exist some problems for us to solve. At present, network grading management is based on password management mode, the existing status will be unable to identify or the status cheat will be unable to trace if the key is lost. Profit from the development of signature verification technology which makes the promotion of electronic signature possibly, remarking people can provides the real evidence for error tracing.
Under the research and analysis of the On-line handwriting signature verification, this paper, which starts with development background and necessity of the network grading system, applies the object-oriented technology to design and realize the system base on Visual C++ 6.0 platform and SQL Sever 2005 database. At the beginning of this paper, a reasonable subsystem model is established by researching network grading of signature verification, then puts forward the solution based on 3-tier C/S structure and designs the framework of the system in view of the insufficiency of efficiency, security, reliability, stability about traditional based on 2-tier C/S structure.
The sever's design of signature verification system is analyzed, including application sever and database sever. To the database sever, the design of datasheets and the trigger are introduced, the composition of signature database including the library of real signature and forged signature is discussed, and a new solution to deal with the renewal of the signature sample library is proposed. Considered the security of the system, some sensitive fields in database are encrypted. To the application sever, a COM module of ATL is developed to let application sever realize the operations of connection, inquiry, insertion, deletion with database. Furthermore, some interfaces are designed and the interface functions are realized.
Through the theory of computer multilayer structure, COM/DCOM technology, data module technology, and other program development technology, this paper has completed the client's design of signature verification system, including communication mechanism between clients and sever. The signature verification system is composed of system management module, signature registration module, signature verification module, images hidden module and something else. In the system management module, the sub-modules such as the rights management module, log management module, system settings module are designed. At the end of this paper, some typical modules have been validated, which show well performance.
Benefit from signature verification technology, the safety and authenticity of network grading are guaranteed, the sense of responsibility to remarking people is increased and the quality of the network grading is improved.
引文
[1] 丁琳．基于互联网的网上阅卷系统的设计和实现：[硕士学位论文]．武汉：华东师范大学．2003
[2] 王海．基于Web Servers的网上阅卷系统的设计和实现：[硕士学位论文]．武汉：华师范大学．2006
[3] 什么是高考网上阅卷?http://www.moe.edu.cn/edoas/website18/info13575.htm
[4] 陈义学．基于工作流的计算机网上阅卷系统的研究和实现：[硕士学位论文]．山东：山东大学．2005
[5] 肖道举，刘琳玲，陈晓苏．基于PKI的远程网上阅卷系统安全设计．计算机工程与科学，2004，26(8)：17-18
[6] 马世晔．网上阅卷的回顾与思考．中国考试，2004，7(9)：24-26
[7] 张敏贵，潘泉，张洪才．多生物特征识别．信息与控制，2002，3(16)：524-528
[8] 于瑞华，洪卫军．生物特征识别技术及其应用．智能建筑与城市信息，2004，8(52)：46-48
[9] 颜琬，郑建彬，周莉等．基于在线手写签名的身份认证技术研究和展望．电子技术应用，2004，(72)9：1-3
[10] 朱勇，谭铁牛，王蕴红．基于笔迹的身份鉴别．自动化学报，2001，27(2)：229-234
[11] H. D. Crane, J. S. Ostrem. Automatic Signature Verification Using a Three-axis Force-Sensitive Pen. IEEE Transaction on Systems, Man and Cybernetics, 1983, 13(3): 329-337
[12] L. Yang. Application of Hidden Markov Models for Signature Verification. Pattern Recognition, 1995, 28(2): 627-629
[13] R. Plamondon, G. Lorette. Automatic Signature Verification and Writer Identification-The State oftheArt. Pattern Recognition, 1989, 22(2): 107-131
[14] W. Nelson, W. Turin, T. Hastie. Statistical Methods for On-line Signature Verification. Progress in Automatic Signature Verification. World Scientific, 1994, 10(9): 126-130
[15] S. H. Kim, M. S. Park, J. Kim. Applying Personalized Weights to a Feature Set for On-line Signature Verification. International Conference on Document Analysis and Recognition, 1995, 2: 882-885
[16] F. Leclerc, R. Plamondon. Automatic Signature Verification. International Journal of Pattern Recognition and Art Intelligence, 1994, 8(3): 643-660
[17] K. Jain, D. Griess, D. Connell. On-line signature Verification. IEEE Trans. On Pattern Analysis and Machine Intelligence, 1998, 11(5): 324-340
[18] I. Nakanishi, N. Nishiguchi, Y. Fukui et al. On-line Signature Verification Method Utilizing Feature Extraction Based on DWT. IEEE Trans. Inf. Theory, 2003, 38(2): 691-712
[19] L. Lee. Neural Approaches for Human Signature Verification. International Conference on Signal Processing, 1996, 2: 1346-1349
[20] A. Doux. On-line Signature Verification Using DTW and Neural Networks. Biennial Conference of the International Graphonomics Society, 1995, 1: 46-47
[21] 郭震．基于演化计算的签名验证方法研究．[硕士学位论文]．武汉：武汉理工大学信息工程学院．2006
[22] 陈罡，李德毅．数据场思想及其在联机签名鉴别中的应用．计算机工程与应用，2003，12(4)：123-126
[23] J. Brault. Rejean Plamondon. Segmenting Handwritten Signatures at Their Perceptually Important Points. IEEE Transactions on Pattern Analysis and Machine Intelligence, 1993, 15(9): 123-125
[24] C. Schmidt, F. Olschewski. Signature Verification Using a Self-organizing map-a Connectionist Approach Based on Dynamic Feature of the Signature. 7th Biennial Conference of the International Graphonomics Society. 1995, 1: 138-139
[25] F. Bauer, B. Wirtz. Parameter Reduction and Personalized Parameter Selection for Automatic Signature Verification. International Conference on Document Analysis and Recognition, 1995, 1: 13-186
[26] 栾方军，马驷良，程开东，董险峰．基于笔划匹配的在线手写签名身份认证算法．沈阳建筑大学学报(自然科学版)，2005，21(5)：568-572
[27] 左文明．脱机手写签名鉴别研究．计算机应用与软件，2005，22(9)：102-104
[28] 许嵴，施泽生，蔡洪滨等．一种基于多模板匹配的在线手写签名认证方法．计算机应用，2004，24(6)：165-167
[29] 张葵，金先级，裴先登．签名动态特征的特殊点抽取方法．计算机工程与应用，1997，23(6)：38-41
[30] L. Lee, T. Berger, E. Aviczer. Reliable On-line Human Signature Verification Systems. IEEE Trans. On Pattern Analysis and Machine Intelligence, 1996, 18(6): 567-570
[31] S. D. Connell. On-line Handwriting Recognition Using Multiple Pattern Class Models. PhD Thesis MSU-CSE-00-27, 2000, 5(2): 167-171
[32] K. Yu, Y. Wang, T. Tan. Writer Identification Using Dynamic Features.International Conference on Biometric Authentication, 2004, 10(1): 512-518
[33] N. Mohankrishnan, W. S. Lee, M. J. Paulik. Multi-Layer Neural Network Classification of On-line Signature. 39th Midwest Symposium on Circuits and Systems, 1996, 2: 831-834
[34] X. Yang, ETakeshi, O. Kenzo. Selection of Features Verification Using the Genetic Algorithm.Computers & Industrial Engineering, 1996, 30(4): 1037-1045
[35] T. Wessels, C. W. Ornlin. A Hybrid System for Signature Verification. International Joint Conference on Neural Networks, 2000, 5: 509-514
[36] M. E. Munich, P. Perona. Continuous Dynamic Time Warping for Translation-invariant Curve Alignment with Applications to Signature Verification. International Conference on Computer Vision, 1999 1(1): 108-115
[37] N. J. Cheng, C. J. Wen, H. F. Yau. Handwritten Chinese Signature Verification Based on Attributed String Matching of Stroke Linkage Order. International Carnahan Conference on Security Technology, 1998: 238-243
[38] 柯晶，乔谊正，赵宏．联机自动签名鉴定系统．计算机系统应用，1998，3(4)：345-350
[39] 刘映杰，冯晓兰，马义德等．多生物特征识别系统的关键技术．舰船电子工程，2006，1(36)：36-39
[40] 邱德红．基于全程信息和时间弯曲校正的签名认证．华中科技大学学报，2002，30(2)：108-110
[41] J. Richiardi, A. Drygajl, O. Gaussian. Mixture Models for Online Signature Verification. ACM Multimedia Workshop in Biometrics Methods and Applications, 2003, 1: 115-122
[42] 谢忠玉，陈秀义，陈凯．基于三层结构的医院信息系统研究与设计．应用科技，2005， 32 (12)：139-141
[43] 于重重．基于三层Client／Server结构的管理信息系统的实现．计算机应用研究，2000，17 (7)：93-95
[44] 杨立平，王小蕾，李彤等．数据库中间技术及在三层客户机／服务器模型中的实现．小型微型计算机系统，2001，22(4)：46-49
[45] E. Bus. Integraged Circuits and System Design. International Carnahan Conference on Security Technology, 2001, 14(9): 91-96
[46] E. Hamon. Delphi COMProgramming. McGraw-Book, 1999, 12: 123-125
[47] J. Norman. COM/DCOM Unleashed. Software Developer's Journal, 1999, 2(13): 235-238
[48] A. Rofail, Y. Shohoad. COM与COM+从入门到精通．北京：电子工业出版社，2000
[49] 胡百敬，姚巧玫．SQL Sever 2005数据库开发详解．北京：电子工业出版社，2004
[50] Robert Sheldon．．SQL实用教程．北京：清华大学出版社，2004
[51] 赖溪松，韩亮，张真诚．计算机密码学及其应用．北京：国防工业出版社，2004
[52] A. Zeichick. SQL Server 2005: Better Than Ever for Software Developers. Software Developer's Journal, 2005, 10: 213-215
[53] A. Zarski. Security in SQL Server 2005 as seen by a programmer. Software Developer's Journal, 2005, 9(11): 312-315
[2] 王海．基于Web Servers的网上阅卷系统的设计和实现：[硕士学位论文]．武汉：华师范大学．2006
[3] 什么是高考网上阅卷?http://www.moe.edu.cn/edoas/website18/info13575.htm
[4] 陈义学．基于工作流的计算机网上阅卷系统的研究和实现：[硕士学位论文]．山东：山东大学．2005
[5] 肖道举，刘琳玲，陈晓苏．基于PKI的远程网上阅卷系统安全设计．计算机工程与科学，2004，26(8)：17-18
[6] 马世晔．网上阅卷的回顾与思考．中国考试，2004，7(9)：24-26
[7] 张敏贵，潘泉，张洪才．多生物特征识别．信息与控制，2002，3(16)：524-528
[8] 于瑞华，洪卫军．生物特征识别技术及其应用．智能建筑与城市信息，2004，8(52)：46-48
[9] 颜琬，郑建彬，周莉等．基于在线手写签名的身份认证技术研究和展望．电子技术应用，2004，(72)9：1-3
[10] 朱勇，谭铁牛，王蕴红．基于笔迹的身份鉴别．自动化学报，2001，27(2)：229-234
[11] H. D. Crane, J. S. Ostrem. Automatic Signature Verification Using a Three-axis Force-Sensitive Pen. IEEE Transaction on Systems, Man and Cybernetics, 1983, 13(3): 329-337
[12] L. Yang. Application of Hidden Markov Models for Signature Verification. Pattern Recognition, 1995, 28(2): 627-629
[13] R. Plamondon, G. Lorette. Automatic Signature Verification and Writer Identification-The State oftheArt. Pattern Recognition, 1989, 22(2): 107-131
[14] W. Nelson, W. Turin, T. Hastie. Statistical Methods for On-line Signature Verification. Progress in Automatic Signature Verification. World Scientific, 1994, 10(9): 126-130
[15] S. H. Kim, M. S. Park, J. Kim. Applying Personalized Weights to a Feature Set for On-line Signature Verification. International Conference on Document Analysis and Recognition, 1995, 2: 882-885
[16] F. Leclerc, R. Plamondon. Automatic Signature Verification. International Journal of Pattern Recognition and Art Intelligence, 1994, 8(3): 643-660
[17] K. Jain, D. Griess, D. Connell. On-line signature Verification. IEEE Trans. On Pattern Analysis and Machine Intelligence, 1998, 11(5): 324-340
[18] I. Nakanishi, N. Nishiguchi, Y. Fukui et al. On-line Signature Verification Method Utilizing Feature Extraction Based on DWT. IEEE Trans. Inf. Theory, 2003, 38(2): 691-712
[19] L. Lee. Neural Approaches for Human Signature Verification. International Conference on Signal Processing, 1996, 2: 1346-1349
[20] A. Doux. On-line Signature Verification Using DTW and Neural Networks. Biennial Conference of the International Graphonomics Society, 1995, 1: 46-47
[21] 郭震．基于演化计算的签名验证方法研究．[硕士学位论文]．武汉：武汉理工大学信息工程学院．2006
[22] 陈罡，李德毅．数据场思想及其在联机签名鉴别中的应用．计算机工程与应用，2003，12(4)：123-126
[23] J. Brault. Rejean Plamondon. Segmenting Handwritten Signatures at Their Perceptually Important Points. IEEE Transactions on Pattern Analysis and Machine Intelligence, 1993, 15(9): 123-125
[24] C. Schmidt, F. Olschewski. Signature Verification Using a Self-organizing map-a Connectionist Approach Based on Dynamic Feature of the Signature. 7th Biennial Conference of the International Graphonomics Society. 1995, 1: 138-139
[25] F. Bauer, B. Wirtz. Parameter Reduction and Personalized Parameter Selection for Automatic Signature Verification. International Conference on Document Analysis and Recognition, 1995, 1: 13-186
[26] 栾方军，马驷良，程开东，董险峰．基于笔划匹配的在线手写签名身份认证算法．沈阳建筑大学学报(自然科学版)，2005，21(5)：568-572
[27] 左文明．脱机手写签名鉴别研究．计算机应用与软件，2005，22(9)：102-104
[28] 许嵴，施泽生，蔡洪滨等．一种基于多模板匹配的在线手写签名认证方法．计算机应用，2004，24(6)：165-167
[29] 张葵，金先级，裴先登．签名动态特征的特殊点抽取方法．计算机工程与应用，1997，23(6)：38-41
[30] L. Lee, T. Berger, E. Aviczer. Reliable On-line Human Signature Verification Systems. IEEE Trans. On Pattern Analysis and Machine Intelligence, 1996, 18(6): 567-570
[31] S. D. Connell. On-line Handwriting Recognition Using Multiple Pattern Class Models. PhD Thesis MSU-CSE-00-27, 2000, 5(2): 167-171
[32] K. Yu, Y. Wang, T. Tan. Writer Identification Using Dynamic Features.International Conference on Biometric Authentication, 2004, 10(1): 512-518
[33] N. Mohankrishnan, W. S. Lee, M. J. Paulik. Multi-Layer Neural Network Classification of On-line Signature. 39th Midwest Symposium on Circuits and Systems, 1996, 2: 831-834
[34] X. Yang, ETakeshi, O. Kenzo. Selection of Features Verification Using the Genetic Algorithm.Computers & Industrial Engineering, 1996, 30(4): 1037-1045
[35] T. Wessels, C. W. Ornlin. A Hybrid System for Signature Verification. International Joint Conference on Neural Networks, 2000, 5: 509-514
[36] M. E. Munich, P. Perona. Continuous Dynamic Time Warping for Translation-invariant Curve Alignment with Applications to Signature Verification. International Conference on Computer Vision, 1999 1(1): 108-115
[37] N. J. Cheng, C. J. Wen, H. F. Yau. Handwritten Chinese Signature Verification Based on Attributed String Matching of Stroke Linkage Order. International Carnahan Conference on Security Technology, 1998: 238-243
[38] 柯晶，乔谊正，赵宏．联机自动签名鉴定系统．计算机系统应用，1998，3(4)：345-350
[39] 刘映杰，冯晓兰，马义德等．多生物特征识别系统的关键技术．舰船电子工程，2006，1(36)：36-39
[40] 邱德红．基于全程信息和时间弯曲校正的签名认证．华中科技大学学报，2002，30(2)：108-110
[41] J. Richiardi, A. Drygajl, O. Gaussian. Mixture Models for Online Signature Verification. ACM Multimedia Workshop in Biometrics Methods and Applications, 2003, 1: 115-122
[42] 谢忠玉，陈秀义，陈凯．基于三层结构的医院信息系统研究与设计．应用科技，2005， 32 (12)：139-141
[43] 于重重．基于三层Client／Server结构的管理信息系统的实现．计算机应用研究，2000，17 (7)：93-95
[44] 杨立平，王小蕾，李彤等．数据库中间技术及在三层客户机／服务器模型中的实现．小型微型计算机系统，2001，22(4)：46-49
[45] E. Bus. Integraged Circuits and System Design. International Carnahan Conference on Security Technology, 2001, 14(9): 91-96
[46] E. Hamon. Delphi COMProgramming. McGraw-Book, 1999, 12: 123-125
[47] J. Norman. COM/DCOM Unleashed. Software Developer's Journal, 1999, 2(13): 235-238
[48] A. Rofail, Y. Shohoad. COM与COM+从入门到精通．北京：电子工业出版社，2000
[49] 胡百敬，姚巧玫．SQL Sever 2005数据库开发详解．北京：电子工业出版社，2004
[50] Robert Sheldon．．SQL实用教程．北京：清华大学出版社，2004
[51] 赖溪松，韩亮，张真诚．计算机密码学及其应用．北京：国防工业出版社，2004
[52] A. Zeichick. SQL Server 2005: Better Than Ever for Software Developers. Software Developer's Journal, 2005, 10: 213-215
[53] A. Zarski. Security in SQL Server 2005 as seen by a programmer. Software Developer's Journal, 2005, 9(11): 312-315