基于.NET的高校学籍管理信息系统的设计及实现
|
摘要
随着互联网的迅速普及,电子商务、远程教育等网络应用需求的不断扩大和技术要求的不断提高,网络数据库(又称为Web数据库)作为一个数据仓库,已经成为了基于Web的应用系统的重要研究课题。
本文通过对分布式Web应用系统的分析和Web Servers体系结构讨论,针对SUN公司的J2EE与Mictosoft公司的.NET开发平台的各自的特点与优势,选择了微软的VisualStdio.NET技术,从高校的学籍管理入手,经过需求分析、概要设计与总体设计,运用UML分析方法,设计了一个多层结构的基于.NET技术的多层结构的高校学籍管理信息系统。
为了搭建多层结构的分布式Web应用系统的Web Servers体系结构,提高软件的可重用性及应用系统的安全性,本文重点对远程数据库维护中的登录技术、数据加密技术、数据库连接访问技术、数据库安全技术、防Web攻击技术及远程数据容灾备份技术等关键技术进行了研究与分析,提出一些比较好的解决办法。
数据库的安全访问是应用系统开发的一大较为烦锁的难题,本文针对这些问题采用多层结构的形式,采用ASP .NET技术开发设计了一套支持多种常用数据库,并可应用于任何Web系统的业务逻辑。
另外,为了增加数据库的内容的安全和保证数据库操作的安全,分别设计了一套用于数据库内容对称密钥(加密/解密)和散列加密(保证密码安全及避免由于密码相同而造成泄密现象)的业务逻辑,和防止Web攻击的业务逻辑,并于DLL的形式存在,可被任何一个Web服务引用,也可被任何一个应用系统或程序引用。
由于数据的安全除了人为因素的影响外,还可能是自然因素,针对这个问题我特别研究了数据容灾的一些技术。通过研究我在本文中给出了一种即经济又安全可行的远程数据容灾方案。该方案除了保证数据安全外,还可以保证系统在很短时间内得到恢复(或实时恢复),从而可以最大限度的减少损失。
通过高校学籍管理信息系统开发实践,对Web Servers多层体系结构的研究与分析,为基于Web技术的多层结构的网络数据库的远程维护进行了有益的探索。
With the popularization of Internet and the increasing demand for network application such as e-business, distance education and the corresponding requirement of advanced technology, network database or web database, as a data warehouse, has become an important research topic on application system based on the web.By analyzing the application system of distributed web and discussing the systematic structure of Web Servers, in light of the respective features and advantages of Sun company's J2EE and Microsoft company's net development platform, this paper is intended to design a multi-structural information system of managing school roll in higher schools based on .Net technology after a series of demand analysis, outline design and master design of the management of school rolls in higher schools by using the Visual Studio .Net technology and the UML analysis method.In order to establish the systematic structure of Web Serves and enhance reusability of the software and safety of application system, this paper lays emphasis on researching and analyzing technology of loginning, data enciphering, database connection visiting, ensuring database safety, defending Web attack and reserving data to avoid any disaster and then gives some better corresponding solutions.Given the fact that ensuring safety in visiting database is a complicated issue, this paper develops and designs a set of business logics supporting various frequently-used databases and applicable to any Web system by adopting the multi-structural form and ASP.NET technology.In addition, with a view to ensuring safety of the database content and operation, this paper designs business logic applicable to symmetrical enciphering (enciphering and deciphering) and irregular enciphering ( ensuring cipher safety and avoiding secret divulging )and business logic used to defend Web attack in the form of DLL suitable to any Web and any application system or program.In light of man-made and natural factors attributable to data safety, this paper especially researches some technology for ensuring data immune to any disaster and consequently finds an economic, safe and feasible program for avoiding any data disaster. This program is conducive to ensuring data safety as well as system restoration within the shortest time, thus minimizing the loss.Through developing and practicing information system of managing school rolls in higher schools and researching and analyzing the multi-structural structure of Web Servers, this paper does a beneficial exploration into distance maintenance of the multi-structural network database based on Web technology.
本文通过对分布式Web应用系统的分析和Web Servers体系结构讨论,针对SUN公司的J2EE与Mictosoft公司的.NET开发平台的各自的特点与优势,选择了微软的VisualStdio.NET技术,从高校的学籍管理入手,经过需求分析、概要设计与总体设计,运用UML分析方法,设计了一个多层结构的基于.NET技术的多层结构的高校学籍管理信息系统。
为了搭建多层结构的分布式Web应用系统的Web Servers体系结构,提高软件的可重用性及应用系统的安全性,本文重点对远程数据库维护中的登录技术、数据加密技术、数据库连接访问技术、数据库安全技术、防Web攻击技术及远程数据容灾备份技术等关键技术进行了研究与分析,提出一些比较好的解决办法。
数据库的安全访问是应用系统开发的一大较为烦锁的难题,本文针对这些问题采用多层结构的形式,采用ASP .NET技术开发设计了一套支持多种常用数据库,并可应用于任何Web系统的业务逻辑。
另外,为了增加数据库的内容的安全和保证数据库操作的安全,分别设计了一套用于数据库内容对称密钥(加密/解密)和散列加密(保证密码安全及避免由于密码相同而造成泄密现象)的业务逻辑,和防止Web攻击的业务逻辑,并于DLL的形式存在,可被任何一个Web服务引用,也可被任何一个应用系统或程序引用。
由于数据的安全除了人为因素的影响外,还可能是自然因素,针对这个问题我特别研究了数据容灾的一些技术。通过研究我在本文中给出了一种即经济又安全可行的远程数据容灾方案。该方案除了保证数据安全外,还可以保证系统在很短时间内得到恢复(或实时恢复),从而可以最大限度的减少损失。
通过高校学籍管理信息系统开发实践,对Web Servers多层体系结构的研究与分析,为基于Web技术的多层结构的网络数据库的远程维护进行了有益的探索。
With the popularization of Internet and the increasing demand for network application such as e-business, distance education and the corresponding requirement of advanced technology, network database or web database, as a data warehouse, has become an important research topic on application system based on the web.By analyzing the application system of distributed web and discussing the systematic structure of Web Servers, in light of the respective features and advantages of Sun company's J2EE and Microsoft company's net development platform, this paper is intended to design a multi-structural information system of managing school roll in higher schools based on .Net technology after a series of demand analysis, outline design and master design of the management of school rolls in higher schools by using the Visual Studio .Net technology and the UML analysis method.In order to establish the systematic structure of Web Serves and enhance reusability of the software and safety of application system, this paper lays emphasis on researching and analyzing technology of loginning, data enciphering, database connection visiting, ensuring database safety, defending Web attack and reserving data to avoid any disaster and then gives some better corresponding solutions.Given the fact that ensuring safety in visiting database is a complicated issue, this paper develops and designs a set of business logics supporting various frequently-used databases and applicable to any Web system by adopting the multi-structural form and ASP.NET technology.In addition, with a view to ensuring safety of the database content and operation, this paper designs business logic applicable to symmetrical enciphering (enciphering and deciphering) and irregular enciphering ( ensuring cipher safety and avoiding secret divulging )and business logic used to defend Web attack in the form of DLL suitable to any Web and any application system or program.In light of man-made and natural factors attributable to data safety, this paper especially researches some technology for ensuring data immune to any disaster and consequently finds an economic, safe and feasible program for avoiding any data disaster. This program is conducive to ensuring data safety as well as system restoration within the shortest time, thus minimizing the loss.Through developing and practicing information system of managing school rolls in higher schools and researching and analyzing the multi-structural structure of Web Servers, this paper does a beneficial exploration into distance maintenance of the multi-structural network database based on Web technology.
引文
[1] 田雪松 编著.J2EE网络编程标准教程.上海科学普及出版社,2004
[2] 邢国庆 译.J2EE应用与BEA WebLogic Server.电子工业出版社,2002
[3] 姚治安,周志宏 等编著.ASP.NET精彩编程百例.中国水利水电出版社,2003
[4] 章立民 编著.用实例学ASP.NET.电子工业出版社,2004
[5] 陈娴,刘开文 等编著.ASP.NET项目开发实践.中国铁道出版社,2003
[6] 高京义,汤严 编著.SQL基础 第二版.清华大学出版社,2003
[7] 卫海 编著.快速学习SQL Server 2000中文版.中国铁道出版社,2004
[8] 李劲,谢兆阳 编著.Microsoft SQL Server 2000数据库设计与系统管理.清华大学出版社,2002
[9] 郑振楣,于戈,郭敏 编著.分布式数据库.科学出版社,2000
[10] 萨师煊,王珊 编著.数据库系统概论.高等教育出版社,2000
[11] 王胜捷 编著.JAVA程序设计.中国铁道出版社,2003
[12] 黄明,梁旭 编著.JSP信息系统设计与开发实例.机械工业出版社,2004
[13] 王兴东,千丽霞 编著.ASP&ASP.NET应用编程150例.电子工业出版社,2004
[14] 李明刚,肖建 编著.ASP.NET WEB站点高级编程范例.清华大学出版社,2004
[15] 宋文官 编著.电子商务概论.高等教育出版社,2001
[16] 覃征 编著.电子商务导论.人民邮电出版社,2000
[17] 梅绍祖,吕殿平 编著.电子商务基础.清华大学出版社,2001
[18] 王锡林,郭庆平 编著.计算机安全.人民邮电出版社,1995
[19] Abraham Silberschatz编著.数据库系统概念(第四版·影印版).高等教育出版,2002
[20] BonifatiA, Ceri S. Comparative Analysis of Five XML Query Languages. ACM SIGMOD Record, 2000
[21] M.Papazogou and W.valder. Relation Database Management-A systems Programming Approch. New York Prentie Hall, 1989
[22] Challenger J.Iyenger A Dantzig P.A. Scalable system for Consistently Caching Dynamic Web Data. Proc. of INFO-COM'99, 1999, march
[23] Calvanese D.Et al.. View-base query processing for regular path queries with inverse. Proc. Of the ACM SIGA CT-SIGMOD-SIGART syciposium on principles of Database Systems(PODS),2000
[24] Abiteboul S. Et al.. Incremental Maintenance for Materialized Views over Semistructured Data. Proc. Of VLDB'98,1998, Auguest
[25] Lakshmanan L Et al. A declarative language of querying and restructuring the Web. Proc. Of RIDE'96 New Orleans, 1999
[26] Buneman P. Davidson S, Suciu D Et al. A query language and optimization technigues for unstructured data. Proc. Of SIGMOD'96. Montreal, 1996,505～516
[27] Bonilati A, Ceri S. Comparative Analysis of five XML Query languages. ACM SIGMOD Record 2000, 29(1):68～79
[28] Stanley Loh, Landro Krug Wives. Concept-Based Knowledge Discovery in Texts Extracted from the Web. SIGKDD Explorations,2000; 7: 29-39
[29] David Heckerman. Bayesian Networks for Data Mining. Data Mining and Knowledge Discovery, 1997; 1:79-119
[30] Jose Borges,Mark Levene. A Fine Grained Heuristic to Capture Web Navigation Patterns. ACM SIGKDD, 2000; 2 (7): 1 -40
[31] Sanjay Madria,S Bhowmick. Research Issues in Web Data Mining. Research Issues in Web Data Mining.9th Intl. Database Conf, Hong Kong, 1999.7:13-27
[32] Ravi S Sandhu,Edward J Coyne. HalL Feinstein et al. Role-based access control models. IEEE Computer, 1996.2
[33] R Fielding. Hypertext Transfer Protocol-HTTP/1.1. RFC 2068,1997
[34] D Kristol. HTTP State Management Mechanism. RFC 2965,2000
[35] R Rivest. The MD5 Message-Digest Algorithm. RFC 1321,1992.4
[36] Carla Merkle Westphall,Joni da Silva Fraga. Authorization Schemes for Large-Scale Systems based on Java. CORBA and Web Security Models, 1999
[37] A D Rubin,D Geer,M Ranum. Web Security Sourcebook. 1997
[38] A D Rubin,D Geer,Daniel E. A Survey of Web Security. 1999
[39] Romeo A Dumiterscu. Two-Stage Programming via the Client-Servlet-Coprocess Interaction Model. 1998
[40] Chong Fuey Sian. A Java based Distributed Approach to Genetic Programming on the Internet. 1998
[41] Arun Iyengar. Preserving State on the World Wide Web Using Dynamic Argument Embedding. 1997
[42] Joon S Park. A Secure-Cookie Recipe for Electronic Transaction. 1999
[43] Joon S Park,Ravi Sandhu. Secure Cookies on the Web. 2000
[44] Romeo A Dumitrescu. 2SP Online Sessions through Java Servlets. 1998
[45] Adams, Carlisle , Steve Lloyd. Understanding the Public-Key Infrastructure. New Riders Publishing, 1999.11
[46] Austin , Thomas. PKI:A Wiley Tech Brief. John Wiley & Sons, 2000.2.
[47] Feghhi, Jalal, Jalil Feghhi. Secure Networking with Windows 2000 and Trust Services. Addison-Wesley Pub Co, 2001.2
[48] Ford、 Warwick , Michael S.Baum. Secure Electronic Commerce:Building the Infrastructure for Digital Signatures and Encryption. Prentice Hall Press, 1997.4
[49] Garfinkel,Simon, Gene Spafford. Web Security & Commerce. O'Reilly & Associates, 1997.6
[50] Grant, Gail L.. Understanding Digital Signatures :Establishing Trust over the Internet and Other Networks. Computing McGraw-Hill, 1997.11
[51] Howard ,Michael. Designing Secure Web-Based Applications for Microsoft Windows 2000. Microsoft Press, 2000.8.
[52] Schneier, Bruce.Applied Cryptography:Protocols, Algorithms, and Source Code in. John Wiley & Sons, 1995.12
[2] 邢国庆 译.J2EE应用与BEA WebLogic Server.电子工业出版社,2002
[3] 姚治安,周志宏 等编著.ASP.NET精彩编程百例.中国水利水电出版社,2003
[4] 章立民 编著.用实例学ASP.NET.电子工业出版社,2004
[5] 陈娴,刘开文 等编著.ASP.NET项目开发实践.中国铁道出版社,2003
[6] 高京义,汤严 编著.SQL基础 第二版.清华大学出版社,2003
[7] 卫海 编著.快速学习SQL Server 2000中文版.中国铁道出版社,2004
[8] 李劲,谢兆阳 编著.Microsoft SQL Server 2000数据库设计与系统管理.清华大学出版社,2002
[9] 郑振楣,于戈,郭敏 编著.分布式数据库.科学出版社,2000
[10] 萨师煊,王珊 编著.数据库系统概论.高等教育出版社,2000
[11] 王胜捷 编著.JAVA程序设计.中国铁道出版社,2003
[12] 黄明,梁旭 编著.JSP信息系统设计与开发实例.机械工业出版社,2004
[13] 王兴东,千丽霞 编著.ASP&ASP.NET应用编程150例.电子工业出版社,2004
[14] 李明刚,肖建 编著.ASP.NET WEB站点高级编程范例.清华大学出版社,2004
[15] 宋文官 编著.电子商务概论.高等教育出版社,2001
[16] 覃征 编著.电子商务导论.人民邮电出版社,2000
[17] 梅绍祖,吕殿平 编著.电子商务基础.清华大学出版社,2001
[18] 王锡林,郭庆平 编著.计算机安全.人民邮电出版社,1995
[19] Abraham Silberschatz编著.数据库系统概念(第四版·影印版).高等教育出版,2002
[20] BonifatiA, Ceri S. Comparative Analysis of Five XML Query Languages. ACM SIGMOD Record, 2000
[21] M.Papazogou and W.valder. Relation Database Management-A systems Programming Approch. New York Prentie Hall, 1989
[22] Challenger J.Iyenger A Dantzig P.A. Scalable system for Consistently Caching Dynamic Web Data. Proc. of INFO-COM'99, 1999, march
[23] Calvanese D.Et al.. View-base query processing for regular path queries with inverse. Proc. Of the ACM SIGA CT-SIGMOD-SIGART syciposium on principles of Database Systems(PODS),2000
[24] Abiteboul S. Et al.. Incremental Maintenance for Materialized Views over Semistructured Data. Proc. Of VLDB'98,1998, Auguest
[25] Lakshmanan L Et al. A declarative language of querying and restructuring the Web. Proc. Of RIDE'96 New Orleans, 1999
[26] Buneman P. Davidson S, Suciu D Et al. A query language and optimization technigues for unstructured data. Proc. Of SIGMOD'96. Montreal, 1996,505～516
[27] Bonilati A, Ceri S. Comparative Analysis of five XML Query languages. ACM SIGMOD Record 2000, 29(1):68～79
[28] Stanley Loh, Landro Krug Wives. Concept-Based Knowledge Discovery in Texts Extracted from the Web. SIGKDD Explorations,2000; 7: 29-39
[29] David Heckerman. Bayesian Networks for Data Mining. Data Mining and Knowledge Discovery, 1997; 1:79-119
[30] Jose Borges,Mark Levene. A Fine Grained Heuristic to Capture Web Navigation Patterns. ACM SIGKDD, 2000; 2 (7): 1 -40
[31] Sanjay Madria,S Bhowmick. Research Issues in Web Data Mining. Research Issues in Web Data Mining.9th Intl. Database Conf, Hong Kong, 1999.7:13-27
[32] Ravi S Sandhu,Edward J Coyne. HalL Feinstein et al. Role-based access control models. IEEE Computer, 1996.2
[33] R Fielding. Hypertext Transfer Protocol-HTTP/1.1. RFC 2068,1997
[34] D Kristol. HTTP State Management Mechanism. RFC 2965,2000
[35] R Rivest. The MD5 Message-Digest Algorithm. RFC 1321,1992.4
[36] Carla Merkle Westphall,Joni da Silva Fraga. Authorization Schemes for Large-Scale Systems based on Java. CORBA and Web Security Models, 1999
[37] A D Rubin,D Geer,M Ranum. Web Security Sourcebook. 1997
[38] A D Rubin,D Geer,Daniel E. A Survey of Web Security. 1999
[39] Romeo A Dumiterscu. Two-Stage Programming via the Client-Servlet-Coprocess Interaction Model. 1998
[40] Chong Fuey Sian. A Java based Distributed Approach to Genetic Programming on the Internet. 1998
[41] Arun Iyengar. Preserving State on the World Wide Web Using Dynamic Argument Embedding. 1997
[42] Joon S Park. A Secure-Cookie Recipe for Electronic Transaction. 1999
[43] Joon S Park,Ravi Sandhu. Secure Cookies on the Web. 2000
[44] Romeo A Dumitrescu. 2SP Online Sessions through Java Servlets. 1998
[45] Adams, Carlisle , Steve Lloyd. Understanding the Public-Key Infrastructure. New Riders Publishing, 1999.11
[46] Austin , Thomas. PKI:A Wiley Tech Brief. John Wiley & Sons, 2000.2.
[47] Feghhi, Jalal, Jalil Feghhi. Secure Networking with Windows 2000 and Trust Services. Addison-Wesley Pub Co, 2001.2
[48] Ford、 Warwick , Michael S.Baum. Secure Electronic Commerce:Building the Infrastructure for Digital Signatures and Encryption. Prentice Hall Press, 1997.4
[49] Garfinkel,Simon, Gene Spafford. Web Security & Commerce. O'Reilly & Associates, 1997.6
[50] Grant, Gail L.. Understanding Digital Signatures :Establishing Trust over the Internet and Other Networks. Computing McGraw-Hill, 1997.11
[51] Howard ,Michael. Designing Secure Web-Based Applications for Microsoft Windows 2000. Microsoft Press, 2000.8.
[52] Schneier, Bruce.Applied Cryptography:Protocols, Algorithms, and Source Code in. John Wiley & Sons, 1995.12