支持可信认证的移动IPSec VPN系统设计

发布时间：2019-07-01 19:08

【摘要】：基于IPSec协议的移动VPN系统为移动终端的远程接入提供了可行的解决方案,但IPSec协议的普通身份认证没有考虑移动终端系统的完整性和可信性,造成终端安全漏洞,给被接入系统和被访问信息带来安全隐患。针对这个问题,提出支持可信认证的移动IPSec VPN系统,并给出其系统架构和关键技术。该系统在实现了普通IPSec VPN系统的安全功能之外,增加了多因子与可信证明相结合的复合认证功能、基于信任的动态访问控制功能。并对其进行了原型实现和性能测试及分析,表明了在将时间代价合理控制的前提下,该系统有效确保了终端的可信接入、通信信道中数据传输的安全可靠以及被接入网络的资源安全及应用服务的可用性和可管控性。
[Abstract]:The mobile VPN system based on IPSec protocol provides a feasible solution for remote access of mobile terminal, but the ordinary identity authentication of IPSec protocol does not consider the integrity and credibility of mobile terminal system, resulting in terminal security vulnerabilities, which brings hidden dangers to the accessed system and accessed information. In order to solve this problem, a mobile IPSec VPN system supporting trusted authentication is proposed, and its system architecture and key technologies are given. In addition to the security function of ordinary IPSec VPN system, the system adds the compound authentication function of multi-factor and trusted proof, and the dynamic access control function based on trust. The prototype implementation, performance test and analysis are carried out, which shows that the system effectively ensures the trusted access of the terminal, the security and reliability of data transmission in the communication channel, the resource security of the accessed network and the availability and control of application services under the premise of reasonable control of the time cost.
【作者单位】：河南科技大学电子信息工程学院;
【基金】：国家自然科学基金项目(61003234) 河南省高等学校科技创新人才计划基金项目(2011HASTIT015) 河南省科技创新人才计划基金项目(134100510011)
【分类号】：TP393.08

【共引文献】