CAJ | 학술논문

以在线服务取代离线数据是近年来地理信息应用方式的一个重要转变。由于地理信息资源的特殊性，安全体系的设计及权限控制一向是地理信息公共服务平台建设重点。本文首先介绍了 Http 认证和令牌认证2种典型的地理信息权限控制方法。然后以数字扬州地理信息公共服务平台为例，分析了其在地理信息服务聚合分发过程中可能面临的安全风险，以及对应的安全策略体系框架。最后阐述了 ArcGIS Server 令牌技术在公共服务平台安全体系中的实现方法，并对应用效果做出分析。
이재선복무취대리선수거시근년래지리신식응용방식적일개중요전변。유우지리신식자원적특수성，안전체계적설계급권한공제일향시지리신식공공복무평태건설중점。본문수선개소료 Http 인증화령패인증2충전형적지리신식권한공제방법。연후이수자양주지리신식공공복무평태위례，분석료기재지리신식복무취합분발과정중가능면림적안전풍험，이급대응적안전책략체계광가。최후천술료 ArcGIS Server 령패기술재공공복무평태안전체계중적실현방법，병대응용효과주출분석。
Replacing offline data with on-line service is an significant change in the application of GIS in recent years.Because of the particularity of GIS resources,the design of security system and access control has always been the most important aspect in the construction of geographic information public service platform.It firstly introduces two kinds of typical geographic information access control methods—http authentication and token authentication.Then analyzes the security risks that may be faced in the process of geographic information service aggregation-distribution and the corresponding security policy framework,take the Digital Yangzhou GIS public service platform for example.Lastly,elaborates the implementation method of ArcGIS Server token technology in geographic information public service platform security system and analyzes the application effect of this technology.