全字段加密交换机密钥管理方案设计与实现  

Design and implementation of key management in safe-switch system

作　　者：田建新[1] 蔡开裕[2] 

机构地区：[1]武警乌鲁木齐指挥学院,新疆乌鲁木齐830001 [2]国防科学技术大学计算机学院,湖南长沙410073

出　　处：《计算机工程与设计》2007年第22期5393-5395,共3页Computer Engineering and Design

摘　　要：针对大部分网络攻击都来自网络系统内部这种情况,自主研发了一个高安全性的全字段加密交换机系统,有效地防范了来自内部的攻击。该交换机系统中的密钥管理方案的设计与实现,大大加强了全字段加密交换机系统的安全性,经过测试运行,该方案具有较高的安全性,可有效满足目前的需要。Aimed at the condition where most of the intemet attacks comes from inside, a safe-switch system is built, which encrypts all the traffics through the link. This system can effectively resist the attacks from inside, and the design and implementation of its sub system, which be called all-packet-encrypt key management, The test result show this methud can effectively build up the safety of the system and satisfy the needs at present.

关 键 词：加密交换机系统 密钥管理 DIFFIE-HELLMAN算法 HMAC运算 密钥表 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]