基于PKI的内网信息安全访问控制体系设计与实现  

Design and realization of information security access control system based on PKI technology

作　　者：王越[1] 杨平利[1] 宫殿庆[1] 

机构地区：[1]西北核技术研究所,陕西西安710024

出　　处：《计算机工程与设计》2011年第4期1249-1253,共5页Computer Engineering and Design

摘　　要：为解决内网信息安全管理问题,依据安全等级防护标准和信息安全技术的研究,提出了一种基于公开密钥基础设施(PKI)在内部网构建信息安全访问控制体系的设计模型。该模型通过身份认证、终端防护、SSL安全认证网关的有效结合,建立由终端至涉密资源之间可信、完整、有效的信息安全传输机制。应用实例表明了该方法在实际信息安全访问控制中的可靠性和有效性。Main problem of the safety protection for involved secret computer information system is presented,Though referencing the standard of the safety protection for involved secret computer information system and studying the technology of information safety pro-tection.A way is put forward to design secure model of information safety access control system based on public key infrastructure（PKI） technology particularly.With integration of CA,terminal protection and SSL security gateway,the secure model will keep the confi-dentiality,the integrity and the usability of encryption data transmission.The application results show that the system can lead to security and reliability,which is of certain valuable reference to information security management of the similar corresponding systems.

关 键 词：信息安全 公开密钥基础设施 身份认证 安全套接层协议 访问控制 加密传输 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]