一种分布式网络访问控制的设计与实现  

Design and implementation of distributed network aaccessing control

作　　者：苏朋程[1] 

机构地区：[1]贵州师范大学社会科学处,贵州贵阳550001

出　　处：《贵州师范大学学报（自然科学版）》2008年第4期100-103,共4页Journal of Guizhou Normal University：Natural Sciences

基　　金：贵州师范大学青年教师科研基金项目(校科青2007-1-22)

摘　　要：采用网络中间层驱动技术,设计的驱动程序间接绑定硬件网卡设备,在协议驱动层和微端口驱动层之间虚拟成一个网卡。控制端通过发送网络访问控制文件给被控制端实现网络访问的集中控制,由被控制端进行网络数据包过滤处理,实现了分布式网络访问控制,其优点是减轻了网络访问控制服务器的负荷。NDIS Intermediate Driver technology is adopted in this paper. Intermediate driver program is banded to network adapter indirectly. The program forms a dummy network adapter in the middle of protocol driver layer and miniport driver layer. The control entity controls given entities by sending access control rule files, and then filtrates packets in according to received access control rule files. In this way, distributed network accessing control is implemented. Its advantage is lightened the load of net-work assess control server.

关 键 词：网络层中间驱动 虚拟网卡 分布式网络访问控制 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]