基于SDP的高校融合门户部署及安全性研究  

Deployment and Security Research of University Integrated Portals Based on SDP

作　　者：冯小玲 Feng Xiaoling(Shanxi Vocational University of Engineer Science and Technology,Taiyuan,030619,China)

机构地区：[1]山西工程科技职业大学,山西太原030619

出　　处：《中国现代教育装备》2025年第5期26-29,共4页China Modern Educational Equipment

基　　金：山西省科技厅软科学项目“基于数据驱动的MOOC资源智能治理模型建构研究--以山西高校教育为视角”(编号:2019041016-3);山西工程科技职业大学教学改革项目“职业教育一流核心课程建设研究”(编号:GKDXJ202427)。

摘　　要：如何解决高校师生在校外访问校内网络的身份认证、访问控制与便捷操作之间的矛盾是高校智慧校园建设亟待解决的问题。阐述了SDP三维架构的零信任模式,通过对高校VPN进行“动态+细粒度”的访问控制、用户授权策略的零信任网络部署,实现了与VPN的融合共存,并对部署过程中的关键技术问题进行了深入分析和研究,提出了相应的解决方案,实现对用户的身份验证和对设备、应用程序、资源共享等的使用授权,实时感知融合门户的安全管理风险,提升高校校园网络的可靠性和安全性。Addressing the conflict between identity authentication,access control,and user convenience for off-campus access to oncampus networks by faculty and students is a critical challenge in the construction of smart campuses in universities.This paper presents a zero-trust model based on the Software Defined Perimeter(SDP)three-dimensional architecture.By implementing dynamic and finegrained access control and user authorization strategies within a zero-trust network on university VPNs,this approach achieves seamless integration and coexistence with existing VPN infrastructure.We conduct a comprehensive analysis and in-depth research on key technical issues encountered during the deployment process,proposing corresponding solutions.These solutions facilitate identity verification and authorization for users,devices,applications,and resource sharing,while providing real-time risk management for the integrated portal's security.The proposed approach significantly enhances the reliability and security of university campus networks.

关 键 词：零信任 SDP 动态授权 访问控制 融合门户 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] G434[自动化与计算机技术—计算机科学与技术]