線上服務的資訊安全──以大學網路選填志願為例

Information Security of On-line Service-The Example of Application on Enrollment for College Admission

民國94年，成功大學計算機與網路中心及電機系資訊安全團隊承辦了我國首次大學選填志願網路作業，經過一年的規劃、設計與實作，約10萬名考生透過網路完成其選填志願工作，圓滿成功。本文將介紹大學網路選填志願之正確性與安全暨相關作業，並可達到網路選填志願的4個重要目標：可用性、安全性、完整性與公平性。經由本次活動，我們證明，以大學選填志願如此重要的工作，在確保選填志願檔案安全無虞的條件下，亦能夠透過線上的方式服務廣大的社會大眾。我們深信藉由檔案管理與資訊安全機制的建立，逐漸提供線上服務，為一般社會大眾帶來廣大的福祉。

In 2005, the staffs of Computer & Network Center and Information Security Group, which belong to the Department of Electrical Engineering of National Cheng Kung University, took the responsibility for on-line application on enrollment for college admission. That was conducted for the first time in Taiwan. After one-year planning, designing and implementation, there were about a hundred thousand examinees that have successfully completed the procedure on-line. The article introduces the mechanism ensuring the validity and security of application on enrollment for college admission on-line as well as other relevant operations. In addition, four significant objectives: usability, confidentiality integrity and fairness are also discussed. The team has proved that, an extremely important task as enrollment for college admission could also be proceeded on-line without worries about information security. The team also believes that various archive services from government agencies could be provided on line with the help of information security system.