基于libevent架构的终端安全接入管理系统的研究与实现

发布时间：2019-03-13 15:04

【摘要】：随着企业信息化进程的不断推进,各种应用终端与企业信息内网业务服务器之间的数据交互越来越频繁,如何安全高效的完成高并发量的终端的接入并实现接入终端的智能化管理是企业信息化不断推进过程中必须解决的问题。实现终端的安全接入管理包括三个方面:一是通信通道的安全性;二是安全接入系统的处理能力;三是终端的高效管理。通信通道的安全可以保证在传输过程中数据的保密性和完整性;具有高并发处理能力的接入系统能够保证快速响应终端业务请求;高效的终端接入管理能够保证网络资源的高效利用并提升应用系统的智能化管理水平。本文在研究配电自动化和供电电压采集这两种典型的电力应用的接入现状和安全风险的基础上,结合现有的网络高并发设计思路,从网络架构和通信安全两方面着手,研究并解决了配电网应用终端安全接入过程中的高并发和接入的信息安全问题,完成了基于libevent架构的终端安全接入管理系统的设计。该系统利用libevent+线程池技术,可及时有效的处理终端的业务请求;通过实现终端安全接入、密钥协商、密文通信等措施保证了终端与业务系统之间通信通道安全和传输过程中数据的不可篡改性以及完整性。最后通过实验验证了该系统具有高并发低时延的特点。该系统的研究与实现对于企业信息化的建设深入推进具有十分重要的现实意义。
[Abstract]:With the continuous advancement of enterprise informatization process, the data interaction between various application terminals and enterprise information intranet service servers is becoming more and more frequent. How to access the high concurrent terminal safely and efficiently and realize the intelligent management of the access terminal is a problem that must be solved in the continuous progress of enterprise informatization. The secure access management of the terminal includes three aspects: the security of the communication channel, the processing ability of the secure access system, and the efficient management of the terminal. The security of communication channel can guarantee the confidentiality and integrity of data in the process of transmission, and the access system with high concurrent processing ability can ensure rapid response to terminal service requests. Efficient terminal access management can ensure the efficient utilization of network resources and improve the intelligent management level of application system. On the basis of studying the current access situation and security risk of distribution automation and power supply voltage acquisition, combined with the existing high concurrent network design ideas, this paper starts from the two aspects of network architecture and communication security. This paper studies and solves the problems of high concurrency and access information security in the process of secure access of application terminals in distribution network, and completes the design of terminal secure access management system based on libevent architecture. The system uses libevent thread pool technology to deal with terminal business requests in a timely and effective manner. The security of the communication channel between the terminal and the service system and the unusurable modification and integrity of the data in the process of transmission are guaranteed by the measures of terminal secure access, key agreement, ciphertext communication and so on. Finally, the experimental results show that the system has the characteristics of high concurrency and low delay. The research and realization of this system has very important practical significance for the construction of enterprise informatization.
【学位授予单位】：华北电力大学(北京)
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP315;TM73

【参考文献】