高智能楼宇安全系统的设计与实现

发布时间：2018-07-28 10:01

【摘要】：智能楼宇是一种现代信息技术与传统建筑科技相结合的产物。它集成了智能化的信息安全管理系统,以建筑为基本平台,结合建筑设备、网络通信系统和办公自动化系统,是信息、网络、系统、建筑、管理的最优化组合。计算机信息技术是智能楼宇等建筑应用中的关键技术。在智能楼宇各部分系统中,各种类型的设备通过互联的网络实现信息的传输、数据的收集和控制命令的发送与接收。本文阐述了当前智能楼宇系统中在网络信息安全方面存在的一些问题;分析了密码等信息安全技术在智能楼宇系统中应用的可行性;提出了一系列基于PKI公共密钥基础技术的安全措施,结合实际工程需要,在智能楼宇系统中实施了PKI,在硬件和软件两方面构筑了一系列智能楼宇信息安全的防护。主要内容包括:1.在智能楼宇系统中实现了PKI公钥基础设施技术。通过利用PKI技术,使用密码安全算法来确保数据的秘密性、完整性、可认证性和不可否认性,保护智能楼宇系统中的信息安全。2.使用公钥基础设施技术对接入系统的设备进行安全认证。为了能够对接入设备进行安全认证,可信安全中心将给合法设备颁发安全证书,无安全认证的设备接入系统将会被阻止接入,同时实现设备间信息的可信传输。3.提出了一个安全客户端的概念。使用包含USB端口的CPU智能卡作为安全客户端设备,能够让智能楼宇系统中的非专业化的实施人员轻松的进行PKI的部署实施。根据传统防火墙防外不防内的弊病,提出了在智能楼宇系统中构筑PKI的方案;为解决怎样有效认证接入设备的合法身份和非专业技术人员便捷的实施PKI,运用了设备认证开关、可信计算、安全客户端等热门安全技术。
[Abstract]:Intelligent building is a combination of modern information technology and traditional building technology. It integrates the intelligent information security management system, taking the building as the basic platform, unifies the building equipment, the network communication system and the office automation system, is the information, the network, the system, the building, the management optimization combination. Computer information technology is the key technology in building application such as intelligent building. In various parts of intelligent building systems, various types of devices transmit information, collect data and send and receive control commands through interconnected networks. This paper expounds some problems existing in the network information security in the intelligent building system, analyzes the feasibility of the application of the information security technology such as password in the intelligent building system. This paper puts forward a series of security measures based on PKI public key foundation technology, and implements PKI in intelligent building system in combination with practical engineering needs, and constructs a series of information security protection of intelligent building in both hardware and software. The main contents include: 1. The PKI public key infrastructure technology is implemented in the intelligent building system. By using PKI technology, the cryptographic security algorithm is used to ensure the confidentiality, integrity, authentication and non-repudiation of the data, and to protect the information security of the intelligent building system. Public key Infrastructure (PKI) is used to authenticate the access system. In order to authenticate the access equipment, the trusted security center will issue the security certificate to the legal equipment, and the unauthenticated equipment access system will be prevented from accessing, and the trusted transmission of information between the devices will be realized at the same time. A concept of secure client is proposed. Using a CPU smart card with a USB port as a secure client device, the non-professional implementers in the smart building system can easily deploy and implement the PKI. According to the disadvantages of the traditional firewall, the scheme of constructing PKI in the intelligent building system is put forward, and in order to solve the problem of how to effectively authenticate the legitimate identity of the access equipment and how to implement the PKI conveniently by non-professional technicians, the device authentication switch is used. Trusted computing, security client and other popular security technologies.
【学位授予单位】：解放军信息工程大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：TU855

【参考文献】