服務導向架構資訊平台建置

Abstract

在現今的社會中，由於資訊量的快速激增，組織中各個部門不再封閉，部門間的溝通日趨重要；光靠傳統的主從式網路架構是不敷使用的。因而除了主從式之外，分散式的網服務也日益眾要，因而提供一個服務平台來滿足各種網路服務，以及主從式網路架構的需求是未來網際網路日後發展的重要目標。 為了滿足上述的需求，本論文提出一個一般型的服務導向架構，透過ADO.NET技術來存取資料。在網路服務溝通方面，則是以標準的XML格式，透過SOAP，WSDL等HTTP通訊協定來進行溝通。在安全性方面，則是採用註冊、登入方式，結合GMPP通報機制，以及AES與RSA加密方式來保護資料安全。另外，對於每個登入的使用者記錄上站的IP，對IP進行管制。另外也透過SSL與VPN安全通訊協定來增加網路交易時的嚴密性。此外，本論文提出Event-recorder的事件記錄概念，可以讓修改的資料有歷史軌跡。在使用者權限，則是採取access control的想法，讓不同階層的使用者擁有不同的使用權限。 最後，結合數個資料探勘演算法：kNN、K-means、SVM、PCA決策方法，來針對不同使用者需求給予比較與決策時候的分析。

A Service-oriented architecture is a software architecture that uses loosely coupled software services to support the requirements of business processes and software users. Resources on a network in an SOA environment are made available as independent services. This thesis proposes an information platform that provides a web site system which is derived from SOA concept. This web site follows a real-world condition so that people can access it. For example, users in an organization can login into this web site system and use these web services provided from this site. In this way, information and data can be exchanged and shared rapidly. This platform applies ADO.NET to connect other database. Besides, in security issues, login/ registry are used in this web site. And GMPP service is also included to alert users and administrator. And then, two cryptography mechanism AES and RSA are mentioned for encryption and decryption. IP filter module can reject IP which is not in security IP list. Additionally, SSL and VPN are applied here for security issue when transaction. For data tracking, an idea “Event-recorder” is used here, in this way, administrator can track and check whether the data was changed or not. Access Control allows users of different departments can access different data with their own access right. Finally, some data mining algorithm, k-means, such as kNN, PCA, SVM, are provided here for decision making when users need.