校园网VPN系统的访问权限控制及其实现方法  

Application of VPN in Campus Network Based on User Access Rights

作　　者：刘淑影[1] 曾涛[1] 王静[1] 李佩君[1] LIU Shuying;ZENG Tao;WANG Jing;LI Peijun(Fuyang Normal College,Fuyang Anhui 236037,China)

机构地区：[1]阜阳师范学院,安徽阜阳236037

出　　处：《重庆科技学院学报（自然科学版）》2018年第5期100-104,共5页Journal of Chongqing University of Science and Technology：Natural Sciences Edition

基　　金：安徽省自然科学基金青年项目"基于微流控的分子信标DNA计算研究"(1808085QF209);教育部高等教育司产学合作协同育人项目"嵌入式智能应用开发"(201702109077);阜阳师范学院校本科教学工程项目"嵌入式系统应用网络课程资源建设"(2016PPWL19)

摘　　要：校园网上有些资源只允许使用校园网内部合法IP地址的用户访问,住在校外的师生和系统维护人员无法访问。通过互联网建立虚拟专用网络(VPN),则置身于校外的师生员工就可以通过VPN访问校园网内的资源。高等学校的校园网用户规模庞大,为了保证校园网VPN系统使用的安全性,有必要对VPN用户的访问权限进行分类限制。为此,提出了基于用户访问权限的VPN建构方案及实现办法。访问权限的设置,可以按照用户身份类别进行分配,同时也可以根据用户个人需求来进行配置。Some resources on the campus network only allow users to access the legitimate IP addresses in the campus network, so students and maintenance staff who live outside school are unable to visit them. The teachers and students outside the campus can access the resources in the campus network through VPN by building virtual private network （VPN） through Internet. As the campus network of colleges and universities has a large user scale, it is necessary to categorize the access rights of VPN users in order to ensure the security of VPN system in campus network. In view of this problem, this paper proposes a method that people visit the campus network resources according to user＇s access authority in which the distribution of access rights can be distributed according to user＇s identity category or individual way.

关 键 词：校园网 VPN 安全管理 用户 访问权限 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]