电力行业加密远程办公系统的研究与建设  

Study and construction on encryption telecommuting system for electric power industry

作　　者：吴凯峰[1] 沈亮[1] 邹宇[1] 

机构地区：[1]国电信息中心网控中心,北京100761

出　　处：《中国电力》2005年第5期85-88,共4页Electric Power

摘　　要：为保障电力行业关键信息业务的远程加密传输,研究并建设运行了具有数据加密传输和远程用户证书认证功能的符合国家规定的商密级别的电力行业加密远程办公系统。分析SSLVPN和IPSecVPN方案2种技术方案,经论证选择IPSecVPN方案。在传输方面,采用已通过国家密码管理委员会认证的硬件芯片加密算法的数据加密传输技术实现硬件加密。在认证方面,采用基于证书的认证的暨强认证方式。在远程移动用户接入方面,实现了普通电话拨号、CDMA或GPRS无线网卡拨号、企业局域网接入等多种访问方式。建设了一定规模的实际运行系统,能保证电力行业远程办公系统的安全保密。For the purpose of protecting the encryption transmission of the important information, the encryption telecommuting system with the function of encryption transmission and certificate authentication for electric power industry was studied and constructed, which is accord with the national commercial encryption level. Two kinds of technical scheme, SSL VPN and IPSec VPN, were analyzed, and IPSec VPN was adopted. The data encryption transmission technology realized by hardware chip was adopted to realize hardware encryption, which was authenticated by the national cryptogram management committee. The enhanced authentication based on certificate authentication method was adopted. Multi-access methods were realized, such as telephone dial up, CDMA wireless dial up, GPRS wireless dial up, enterprise LAN. The practically running encryption telecommuting system for electric power industry is established in a certain scope, which is capable of ensuring the security and secrecy of the important information transmission.

关 键 词：远程办公系统 加密传输 加密算法 证书认证 硬件加密 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]