【作者】 王常杰；

【导师】 王育民；

【作者基本信息】 西安电子科技大学 ， 密码学， 2002， 博士

【摘要】 1968年，英国国家物理实验室建立了第一个基于兰德理论的测试网络。次年，美国国防部高级计划管理局建立了ARPAnet，即Internet的前身。随后，Internet以爆炸性的速度迅速发展，不可替代的融入到人类社会的各个角落中。随着Internet的快速发展，其安全问题日益受到人们的关注。在利用像Internet这样的公开性网络进行通信或商业活动时，一个非常重要的和现实的问题是如何保证信息在系统通信中的保密性、认证性和完整性。确保这一点是Internet实用化的关键。目前，Internet的安全研究主要考虑以下两个方面，一个是网络系统的安全设计技术，如防火墙技术。一个是应用安全技术，即针对不同的网络应用，设计相应的安全方案。不论以上讨论的哪个方面，要解决Internet的安全问题的一个基本的工具就是采用密码技术。 本论文主要从Internet的网络安全和应用安全的角度研究Internet安全问题，设计并实现了几个安全的Internet应用系统。重点讨论Internet的防火墙技术、公钥证书系统、Internet匿名通信技术、安全的Internet Mobile Agent系统。 目前，众多的学者还在针对Internet的安全问题进行研究，还有很多具体安全问题没有很好的解决。在本论文中，我们只是针对Internet安全研究的几个具体问题进行了讨论，主要研究成果如下： 1 对现有防火墙系统进行改进，设计了基于IPv6的防火墙系统。 2 分析了现有PKI结构的缺陷，并设计了一个改进的公钥证书系统。 3 系统的研究了现有Internet的匿名通信技术，并给出了一个各类匿名通信技术的综合比较。 4 采用改进的群签名技术设计并实现了一个匿名WEB浏览系统，并给出性能分析曲线和安全性分析。该系统从安全性能上优于现有的任何系统(如CROWDS，ANOMOZIER)。 5 综合研究了Internet移动代理技术中的安全问题，指出存在的各类安全隐患，并综合比较了现有移动代理系统的安全性能。 6 设计了一个应用移动代理技术实现的安全WEB交易方案，同现有的同类方案相比，该方案同时具有高效性、保密性、匿名性、不可否认性等多项安全性能。 7 设计了一个应用移动代理技术实现的密封投标式的多轮在线拍卖系统。该方案满足拍卖需要的各种安全要求。更多还原

【Abstract】 The State Physics Lab of England set up the first testing network based on Lande theory at 1968, and then the Advanced Program Manage Department of USA establish the ARAnet (i.e. the former of Internet) at 1978. From then on, Internet got a great development and has been applied into all aspects of human society. As the same time of the great development of Internet, more and more concerns have been focused on the security problem of Internet. While communicating or doing a business through a public network, i.e. Internet, people always concern the secrecy, authentication and integrality of the information through the network system. How to keep the secrecy, authentication and integrality of information in the network is the key problem to be solved for any application of Internet. Currently, the security researches on Internet are most focus on the following two aspects: one is the research on network system security, i.e. the firewall technique. Another is the security of applications of Internet. That is research on security scheme aim at different Internet applications. To solve the security problem of Internet, the most basic tool is cryptography technology.In this thesis, we research the Internet security problem both in network system and in application system. Our studies are most emphasis on the Firewall technique, Public Certificate system, Internet anonymous communication system and secure Internet Mobile Agent system.By far, there are still many studies on Internet security problems and some security problem are still not solved. We are going to discuss some concrete security problem in this thesis, and the mainly research results are list as follows.1 The defects of existing firewall system are present and an advanced firewall system based on IPv6 are proposed.2 We discuss the security of the PKI and propose an improved public key certificate system.3 We make a completely research on Internet anonymous communication technology and present a security comparison of existing anonymous communication systems.4 An anonymous Web browsing system is proposed and implemented based on group signature scheme. We also present the performance curve and security analyses of our system. From the security consideration, our system is stronger than other existing systems (For instance, CROWDS, ANOMOZIER).5 The security problems of Internet Mobile agent system are discussed and the security requirement of Mobile agent system are present. Furthermore, we give a security performance comparison of existing Mobile Agent system.6 A secure Web transaction scheme based on mobile agent is proposed. Compared with other existing scheme, our scheme has many security properties, such as secrecy, anonymity, effectivity and non-reputation.7 A multi-round online auction system (with seal bids) based on Mobile Agent is proposed and a security analysis of the system is present.更多还原