基于认证服务器的网络防火墙加密算法仿真  

Simulation of Network Firewall Encryption Algorithm Based on Authentication Server

作　　者：陈芳 张爽 陈姣 CHEN Fang;ZHANG Shuang;CHEN Jiao(College of Computer Science and Engineering,Hunan Information University,Changsha Hunan 410151,China;Shenyang Ligong University,School of Automation and Electrical Engineering,Shenyang Liaoning 110117,China)

机构地区：[1]湖南信息学院计算机科学与工程学院,湖南长沙410151 [2]沈阳理工大学自动化与电气工程学院,辽宁沈阳110117

出　　处：《计算机仿真》2023年第1期418-422,共5页Computer Simulation

摘　　要：为加强防火墙的访问控制能力,保障网络安全,提出基于认证服务器的网络防火墙加密算法。利用负载均衡机、服务器集群和数据库设计认证服务器,设计服务器工作流程;采用寻找大素数算法构建素数集合,筛选公开大素数,将模幂算法与滑动窗口相结合,挑选保密大素数;根据公开与保密大素数,以多项式循环形式设立初始密钥、中间密钥和子密钥;最后在认证服务器中,利用初始化处理、服务器注册、用户登录与认证等步骤实现防火墙加密。仿真结果证明,所提算法加密强度理想且速度快,可提高系统吞吐量,进一步保障网络安全。In order to strengthen the access control capability of the firewall and ensure network security, this paper presented a network firewall encryption algorithm based on the authentication server. Firstly, load balancers, server clusters and databases were used to design an authentication server and its workflow. Secondly, an algorithm for finding large prime numbers was adopted to construct a set of prime numbers, and then screen out public large prime numbers. Thirdly, the modular exponentiation was combined with the sliding window to select secret large prime numbers. According to public and secret large prime numbers, the initial key, intermediate key and subkey were established in the form of polynomial cycle. Finally, the firewall encryption was completed in the authentication server after the above steps: initialization, server registration, user login and authentication. Simulation results show that the proposed algorithm has ideal encryption intensity and speed. In addition, this algorithm improves the system throughput and further ensures network security.

关 键 词：认证服务器 防火墙 加密算法 公开大素数 滑动窗口 

分 类 号：C482[社会学]