基于国密算法的安全接入设备设计与实现

发布时间：2018-05-25 05:18

本文选题：IPSec + VPN　；参考：《信息网络安全》2016年11期

【摘要】：为了解决电子政务系统移动终端安全接入问题,文章设计并实现了一个面向移动终端的安全接入设备。该设备基于IPSecVPN技术,主要实现通信隧道的建立、通信双方身份认证、保障数据的机密性和完整性等功能。文章基于Strongswan软件框架的再开发技术完成系统各个模块的功能。密码算法作为设备安全设计的核心,现在通用的密码算法已经不能满足信息安全需求,使用国密算法标准成为设备的必然选择。Strongswan只提供了国际通用算法,因此有必要使用硬件密码卡来实现设备对国密算法的支持。通过修改Strongswan的算法库和策略库将国密算法注册到Strongswan中,同时对其功能模块进行设计改进,最终实现一个基于国密算法的安全接入设备。文章最后搭建测试环境验证了系统的可行性。
[Abstract]:In order to solve the secure access problem of mobile terminal in E-government system, a secure access device for mobile terminal is designed and implemented in this paper. The device is based on IPSecVPN technology, which mainly realizes the establishment of communication tunnel, authentication of identity of both sides of communication, protection of confidentiality and integrity of data and so on. The redevelopment technology based on Strongswan software framework completes the function of each module of the system. As the core of the device security design, the common cryptographic algorithm can no longer meet the information security requirements. Using the national secret algorithm standard has become the inevitable choice of the equipment. Strongswan only provides the international common algorithm. Therefore, it is necessary to use the hardware cipher card to support the national secret algorithm. By modifying the algorithm library and policy library of Strongswan, the secret algorithm is registered into Strongswan, and its function module is designed and improved. Finally, a secure access device based on national secret algorithm is implemented. Finally, the test environment is built to verify the feasibility of the system.
【作者单位】：北京电子科技学院通信工程系;
【基金】：北京市自然科学基金[416307]
【分类号】：TP309

【相似文献】