虚拟数据交换子平台设计与实现  

Design and implementation of virtual data exchange sub-platform

作　　者：江恭和 武友新[2] 李庆华 龚磊[2] 

机构地区：[1]思创数码科技股份有限公司,江西南昌330096 [2]南昌大学信工学院计算机科学与技术系,江西南昌330029

出　　处：《计算机工程与设计》2012年第10期4028-4032,共5页Computer Engineering and Design

基　　金：核高基重大专项基金项目(科技部国科发高[2011]141号)

摘　　要：为解决传统数据交换平台建设模式中平台重复建设、多级数据交换实施难度大的问题,提出了在一个公共数据交换平台上建设多个虚拟交换子平台的模式。通过对多协议标签交换虚拟专用网的研究,提出虚拟交换子平台的总体架构。该架构在一个公共数据交换平台上创建多个虚拟交换子平台,采用用户权限隔离、数据库模式隔离、标签交换、路由隔离、密钥隔离多种技术保证各子平台上数据传输的独立性和安全性。此外,引入中心交换和路由机制将传统的点对点交换模式变为星型交换模式。项目实践表明,该模式能够有效避免平台重复建设、降低实施成本。To solve the problem of repetitive constructions of data exchange platform and to reduce the difficulty of implementa tion, a new construction mode of building multiple virtual data exchange sub-platforms on one common data exchange platform is proposed. First the multi-protocol label switching virtual private network （MPLS VPN） theories are studied. Then the architec ture of virtual data exchange sub-platform （VEP） is presented. Several different virtual exchange platforms are created on a sin- gle common platform, and techniques such as user privilege isolation, database schema isolation, label switching, routing isola- tion, key isolation are used to ensure the isolation and security of data transmission on different sub-platforms. Additionally, center-based data exchange and routing mechanisms are used to convert the traditional point-to-point mode into a star model. It is proved in the project that using this construction mode, the repetitive constructions of data exchange platforms are avoided and the cost of implementation is well reduced.

关 键 词：虚拟数据交换子平台 标签交换 路由隔离 密钥隔离 路由转发表 数据交换平台 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]