【摘要】 针对目前区域网络化制造系统的完全分布式运行模式对信息安全的需求,本文提出了一个基于离散对数的身份认证和密钥协商方案。该方案不依赖于在线用户证书管理中心,因此能很好地适应区域网络化制造系统现有的完全分布式服务模式。通过将现有IPSec框架的内部功能模块进行改造,进而将该安全体制融入到虚拟私有网络(VPN)的服务模块中。安全分析表明,该方案能有效地抵御消息重放攻击和中间人攻击。同时,性能测试表明,该安全体制方案有较高的通信效率,因而能较好地保障区域网络化制造系统的信息安全。更多还原

【Abstract】 As for the present requirements of the fully distributed function schema for regional networked manufacturing systems,we propose a scheme of identity authentication and key agreement based on discrete logarithm.The scheme is independent from the online certification management center,so it can adapt to the present fully distributed service schema harmoniously.The scheme incorporates the Virtual Private Network(VPN)by reconstructing the internal module of the IPSec framework.The security analysis shows the solution can resist message replay attacks and man-in-the-middle attack effectively.The scheme have high efficiency in communications by performance tests.So they can maintain the information security of regional networked manufacturing systems effectively.更多还原