Focusing on a kind of electronic applying system's characteristics and its security requirements, a scheme of enhancing network security is presented. In this scheme, a kind of firewall with DMZ is adopted to separate Intranet from unsafe Extranet. The security of data transmission between users and the system is ensured by SSL. CA is used to authenticate the exterior users' identities. Interior users' identities are verified by an inner authentication center.