Methods and models of designing the secure system of electronic document management in transport logistic cluster

The main goal of this paper is to identify the basic principles of secure electronic document management system for a geographically distributed structures with multiple dissimilar connections. Transport and logistics clusters, representing a heterogeneous system with implicit classification, were taken as an object of the research. The paper considers the basic stages of the system design process, methods and models of information security used to protect information in the electronic document management system operating in a distributed network, which is interoperable with other information systems. The legal base in the field of information security in Russian Federation has been analyzed. Using domestic and foreign experience, the classification is made and the most characteristic type of the transport and logistic cluster for the Russian Federation, i. e. regional, is identified. Using a hierarchical model of the interaction of the components in the transport and logistics cluster, the process of identification of information flows in the cluster has been described. The members of the transport and logistics cluster have been specified, information and anticipated information resources have been categorized. Possible threats and system vulnerabilities, as well as the basic mechanisms of information protection in electronic document management system have been identified. Review and comparison of the existing solutions in the field of electronic document management system have been made, which is resulted in selection of a software product that fully complies with the requirements of the electronic document managing system, both from the point of view of information security and functional possibilities. The process of data exchange of the electronic document management system with other systems containing personal data has been analyzed. As a result, a comprehensive set of measures and means of information protection has been formulated, based on the requirements for providing an adequate level of security to the personal data information systems, automated control systems and information systems transportation and logistics cluster, thus a model with full overlap was implemented on the basis of the architecture of "E1 Evfrat" software complex.