企业局域网机密信息传输系统设计  

Design of Underhandedness Information Transmission System with Local Area Network

作　　者：沈泓[1] 范亚芹[2] 

机构地区：[1]哈尔滨理工大学计算机科学与技术学院,哈尔滨150080 [2]吉林大学通信工程学院,长春130012

出　　处：《吉林大学学报（信息科学版）》2009年第3期324-328,共5页Journal of Jilin University（Information Science Edition）

摘　　要：为防止信息被非法入侵者窃取或更改,实现网络整体监控与信息加密相结合双重安全保障,应用访问控制策略和信息加密技术设计一种机密信息传递系统。该系统硬件采用防火墙的IP(Internet Protocol)地址与MAC(Media Access Control)地址绑定和基于交换机的MAC地址与端口绑定的二级管理方法建立网络监控系统;文件加/解密(软件)系统采用对称性的DES(Data Encryption Standard)算法设计机密信息传输软件,并给出几种硬件实施方式、DES加/解密算法原理和运行程序,为企业系统实施提供了方便,减少了开发周期。DES加/解密过程操作简单,从而提高了机密信息在系统中加/解密速度和系统的性价比。该系统已在多个企业局域网中得到应用,且运行效果良好,在信息传递安全性方面满足用户要求。Aim to enterprise LAN （ Local Area Network） for transmission of confidential information, the use of access control policy and information strategy for the combination of encryption theory, in order to prevent the illegal intruder to steal information or changes in the overall surveillance network encryption and information security, in the secure transmission system （hardware） use the firewall IP （Internet Protocol） address and MAC （ Media Access Control） address binding ＋ based on the switch port MAC address binding with the secondary network management control system; file encryption/decryption （software） system uses the DES （Data Encryption Standard） algorithm for the design of the symmetry of the confidentiality of information transmission software. With an emphasis on the implementation of several hardware, DES eneryption/decryption algorithm and operating procedures, in order to facilitate the implementation of enterprise systems to reduce the development cycle. Since the DES encryption/decryption process is simple, improve the system of confidential information in the encryption/decryption speed of the system of price. This system in the transmission of information security has the user requirements and has beenused in a number of enterprise local area network applications.

关 键 词：加密算法 网络安全 数据加密 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]