国家电网公司统一身份认证平台的设计与实现

发布时间：2019-03-30 21:31

【摘要】：随着计算机与网络通信技术的飞速发展，计算机病毒、各种木马和网络黑客无时无刻不在威胁着网络的安全。在一个开放或半开放的网络环境（如Internet、Intranet）中，如何保障身份的真实性、数据的机密性和完整性以及行为不可抵赖性等基本的信息安全问题，是电子事务，尤其是电子商务、电子政务全面推广应用的前提条件。本文阐述的是利用PKI技术在国家电网公司搭建统一身份认证平台，通过提供真实性、机密性、完整性和抗抵赖等服务，，首先构建一套应用安全支撑平台系统，该系统为操作系统、网络系统、应用系统提供集中管理、身份认证、访问控制、责任认定的安全保障服务，实现用户的身份认证以及用户对国家电网公司网内信息资源、应用系统的“统一登录”（即用户一次登录，就可访问其权限内的应用系统和信息资源）。其次，通过在内网入口处部署一体化安全网关（UTM）保证由互联网进入到省公司内网的数据安全。UTM具有高性能、绿色低碳的特点，集防火墙、VPN、入侵防御（IPS）、防病毒、上网行为管理、内网安全、反垃圾邮件、抗拒绝服务攻击（Anti-DoS）、内容过滤、NetFlow等多种安全技术于一身，同时全面支持路由协议、QoS、高可用性（HA）、日志审计等多种功能，为网络边界提供了全面实时的安全防护。
[Abstract]:With the rapid development of computer and network communication technology, computer viruses, Trojan horses and network hackers threaten the security of the network all the time. In an open or semi-open network environment (such as Internet,Intranet), how to guarantee the authenticity of identity, the confidentiality and integrity of data and the non-repudiation of behavior and other basic information security problems are electronic transactions, especially electronic commerce. E-government comprehensive popularization and application of the prerequisites. This paper describes the use of PKI technology to build a unified identity authentication platform in the State Grid Corporation, by providing authenticity, confidentiality, integrity and non-repudiation services, first of all, a set of application security support platform system is constructed. The system provides centralized management, identity authentication, access control, responsibility assurance services for operating system, network system and application system, realizes the identity authentication of users and users' information resources to the state power grid company. The "unified login" of the application system (that is, the user can access the application system and information resources within his or her authority on one login). Secondly, the integrated security gateway (UTM) is deployed at the entrance of the internal network to ensure the data security from the Internet to the provincial corporate intranets. UTM has the characteristics of high performance, green and low carbon, set firewall, VPN, intrusion prevention (IPS), anti-virus, Internet behavior management, intranet security, anti-spam, anti-denial of service (Anti-DoS), content filtering, NetFlow and other security technologies in one, while fully supporting routing protocols, QoS, high availability (HA), Log audit and other functions provide a comprehensive and real-time security protection for the network boundary.
【学位授予单位】：天津大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP311.52;TP393.08

【相似文献】