基于安全协议的校园网接入认证系统分析设计——以北京印刷学院校园网为例  

Analysis and Development of Access and Authentication about Campus Ethernet Broadband Based on 802.1X

作　　者：余敦一[1] 

机构地区：[1]北京印刷学院,北京102600

出　　处：《北京印刷学院学报》2013年第6期63-68,共6页Journal of Beijing Institute of Graphic Communication

摘　　要：为了解决以"共享"技术设计的中型以太网面临的安全问题,必须对用户或者用户设备进行认证授权和接入控制。通过分析对比行业内认证协议的不同,引入了支持802.1X协议的认证体系结构,以北京印刷学院校园网为例,并对技术路线进行分析,详细解读了RADIUS协议、特点、运作方式,并着重分析了RADIUS协议的安全问题,对基于802.1X协议的RADIUS认证的软件结构进行总体设计和数据库设计。通过分析实例运行评估表明,该设计是针对校园网安全认证的较好的解决方案。In order to solve the medium Ethernet of sharing technical design in security problems, Certification authoriza- tion ＆ access control for users ＆ equipment are required. Taking an example of Beijing Institute of Graphic Communica- tion, this paper introduces the authentication structure of 802. 1X protocol, and the technical route is analyzed. Compared to the AAA industry standards and requirements, this paper is detailed interpretation of the RADIUS protocol, characteristics, operating mode. RADIUS protocol security problems are analyzed. The results show that this design is better solution for security certification of campus network.

关 键 词：以太网 802 1X 接入认证 RADIUS 校园网 

分 类 号：TP393.1[自动化与计算机技术—计算机应用技术]