.NET环境下实现的网络安全传输

【作者】 郑洋；

【导师】 谢琦；

【作者基本信息】 郑州大学 ， 计算机应用技术， 2004， 硕士

【摘要】 本文研究了网络加密传输的一些基本理论和实践方法，对公开密钥和对称密钥加密的适用场合进行了讨论；并着重对非专利的Blowfish算法及其实现方法进行了讨论。在对各种加密技术作了简要的介绍的基础上实现了一个简单的数据传输安全通道。 在实现平台的选择上，由于．NET平台提供了一些非常重要且强大的应用程序开发技术，并且该平台包含了一个范围广泛的类库，可以大大提高开发效率，所以本文选用了在．NET Framework环境下进行开发。 本文实现了一个模拟Kerberos认证服务的简单认证中心，并对Kerberos协议加以改进，增加了协商会话期密码算法的功能，并将Kerberos认证服务采用的对称密码算法DES改成公开密钥算法RSA。该认证中心可以集中管理、认证用户身份，并产生和分发客户与服务器之间的会话期密钥，供提出请求的客户端和接收请求的服务器端双方在通信时使用。在客户端和服务器通信时，客户端首先在认证中心进行身份验证，通过验证后，得到包含身份凭证和会话期密钥的票据(ticket)，客户端使用这个票据来向服务器表明自己的合法身份，并且通过这个票据传送会话期密钥给服务器，此后客户端和服务器之间所有数据传输都使用这个密钥进行加密和解密。此外，本文对．NET环境下实现网络安全传输时，所涉及到的Socket套接字编程、多线程的应用等也分别进行了分析。 本文对如何在公共的互联网上验证传输者身份、如何管理会话密钥以及如何采用加密技术保护自己的数据安全做了详细的介绍和实践，对密钥的发放和管理进行了讨论；并讨论了不同加密算法在通用计算机上实现的效率。但网络数据安全传输所涉及到的范围要广泛得多，必须综合考虑各种因素，才能建立一个满足需要的安全系统。更多还原

【Abstract】 This paper work over some elementary theory and practise method about the encrypt of network transfer. In this paper, also talk about the public key algorithm and symmetry algorithm.The nonpatent Blowfish algorithm and its realization is emphases of this paper. On a base of gave out an brief introduction of many encrpytion techniques,this paper have accomplished a simple data transporting security channel.The author choosed Microsoft .Net Framwork as his programming environment because the .Net platform offers series of very important and powerful programming technologies and containes a wide class libraries, which could enhance the programming efficiency distinctly.In this paper, the author built up a simple certificate center in order to simulate Kerberos certificate service. And the Kerberos protocol was reformed in following functions: improved the ciphertext arithmetic in protocol dialogue period, and choosed RSA, an open ciphertext key arithmetic instead of DES, the symmetry ciphertext arithmetic used in Kerberos certificate service. The certificate center could manage and identify the users’ status, produce and dispense the ciphertext key used in the data transportation between clients and corresponding servers.When the clients start to communicates with servers, the clients should pass the status identification firstly, then get a ticket contained status and protocol dialogue ciphertext key from the certificate center. The clients shows its legal status to servers and transmit the protocol dialogue ciphertext key to servers through using the ticket. Thereafter, all data transmission between clients and servers were encrypted or disencrypted through using the unique protocol dialogue ciphertext key. Furthermore, the Socket programming and multithreading application for achieving the security data transmission through network in .Net environment were also described respectively in this paper.Although the author detailed introduce and practise the theory on how to identify the status of data transfers, how to manage the dialogue ciphertext key and how to promise the security of own data through using encrpytion tachniques in public open Internet, when the administrators would like to build up an enough secure network system, they must consider all factorsgenerally because the technology involved in networks data security transfers is much more wide and complex than the above mentioned in this paper.更多还原