一种基于WTLS的轻型移动VPN方案  

A Lightweight WTLS-based Mobile VPN Scheme

作　　者：叶润国[1,2] 冯彦君[1,2] 虞淑瑶[1,2] 宋成[1] 

机构地区：[1]中国科学院网络信息中心R&D室 [2]中国科学院计算所,北京100080

出　　处：《微电子学与计算机》2005年第4期126-130,133,共6页Microelectronics & Computer

基　　金：中科院知识创新工程下一代因特网综合环境(2001AA2130)子项目(2001AA112136)

摘　　要：各种传统的远程访问VPN方案(包括IPSec-VPN和SSL-VPN)都只是为固网环境下外出企业员工的“游牧访问”而设计的,它不适合于未来的移动无线网络场景。本文针对移动无线场景中特有的无线终端计算能力和网络带宽限制等问题,提出了一种基于WTLS安全协议的轻型移动VPN方案。该移动VPN方案支持移动节点在不同无线接入网络之间的自由切换,允许外出企业员工在任何时间、任何地点、使用最佳的无线接入网络连接到企业网络并安全地访问企业内部资源。Conventional Remote Access VPN Schemes (including IPSec-VPN and SSL-VPN schemes) were just designed for road warriors securely accessing their enterprise networks under fixed wired networks; they are not suitable for future mobile wireless network scenarios. This paper proposed a lightweight WTLS-based mobile VPN scheme while taking the constraints at wireless terminals'poor computing power and lower wireless link bandwidth into consideration. The proposed mobile VPN Scheme supports free handover among heterogeneous wireless access networks, enables mobile workers to connect to their enterprise networks at anytime, anywhere, via the best wireless access network, and then access the enterprise private resources securely.

关 键 词：无线网络 移动访问 WTLS 安全隧道 INTRANET 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]