面向公有云的国密IPSec VPNaaS系统研究  

Research on Chinese Cryptography IPSec VPNAAS System for Public Cloud

作　　者：蒋汶芮 罗俊[2] 胡晓勤 龚勋 JIANG Wenrui;LUO Jun;HU Xiaoqin;GONG Xun(College of Cybersecurity,Sichuan University,Chengdu 610065;Westone Information Industry Inc.,Chengdu 610041)

机构地区：[1]四川大学网络空间安全学院,成都610065 [2]卫士通信息产业股份有限公司,成都610041

出　　处：《现代计算机》2021年第17期25-30,36,共7页Modern Computer

摘　　要：随着公有云的快速发展,保障云上业务系统和本地数据中心的通信安全被越来越多人关注,目前公有云上一般使用虚拟IPSec VPN网关来搭建安全传输通道。但是普通的虚拟IPSec VPN网关不能满足国家密码管理局提出的IPSec VPN网关标准。针对以上问题,提出一种面向公有云的国密IPSec VPNaaS系统。该系统通过整合云密码机来满足国密IP-Sec VPN网关的密钥管理要求,并充分利用公有云的基础设施提供便捷强大的IPSec VPN服务。With the rapid development of public cloud,more and more people pay attention to the security of communication between cloud business system and local data center. At present,virtual IPSec VPN gateway is generally used to build secure transmission channel on public cloud. But the common virtual IPSec VPN gateway cannot meet the IPSec VPN gateway standard proposed by the National Cryptography Administration. To solve the above problems,a Chinese cryptography IPSec VPNAAS system for public cloud is proposed. The system integrates the cloud cipher machine,which can meet the IPSec VPN standard of the State Encryption Administration,and makes full use of the public cloud infrastructure to provide convenient and powerful IPSec VPN services.

关 键 词：公有云 国密 IPSec VPN 密码机 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术] TN918.1[自动化与计算机技术—计算机科学与技术]