网络化远程测控系统的网络信息安全关键技术研究

【作者】 姚嫚；

【导师】 翟正军；

【作者基本信息】 西北工业大学 ， 软件工程， 2007， 硕士

【摘要】 随着网络的快速发展，网络中的安全问题研究显得尤为重要。VPN技术是解决网络安全问题的有效方法之一。SSLVPN是VPN技术中近期兴起的新的分支。本文对网络化远程测控系统的安全性问题进行分析，搭建了适用于网络化远程测控系统的SSL VPN安全体系架构。 针对网络化远程测控系统中对于信息安全传输的要求，论文深入分析了现有的主要网络安全技术(包括加密算法、安全通信、VPN技术等)，讨论了目前主流的VPN实现方式和整个VPN系统的框架构成以及工作流程，研究了SSL VPN系统，设计了适用于远程测控系统的基于SSL VPN的安全体系框架。 针对远程测控系统的身份认证需求，论文基于PKI体系结构，提出了一种将PKI认证技术应用到远程测控系统VPN网关中的方案，该方案用于加强身份认证，完善了VPN的安全。通过对集成在身份管理中的PKI系统进行设计，实现了CA管理模块的签发、管理和验证证书的功能，并把签发的证书作为远程测控系统VPN网关中身份认证的凭据，为VPN网关提供安全服务。 基于对远程测控系统安全框架的分析，设计了适用于远程测控系统的VPN网关，并对其中的远程测控系统安全模块进行设计，将信息通过安全的隧道转发给远程用户，保障测控数据的传输安全。 论文最后给出了PKI系统的应用测试结果和远程测控系统VPN网关在不同配置下的测试数据。通过测试数据分析，选择合适的加密算法，有效地保障系统的安全性。更多还原

【Abstract】 Along with the network development, the security problem in network appears especially importantly. The VPN technology is one of effective methods to solve the security problem. SSL VPN is a new VPN technology branch which is reserched in the nearly year. The questions of network remotion testing and control system are analyed in this article. The safety system based on the SSL VPN is established.Due to the imformations transporting security request of network remotion testing and control system, the morden network module security technology.is analyzed in the paper, the main VPN styles and the whole structure of VPN system are researched deeply.The security structure based on the SSL VPN of remotion testing and control system is designed.Due to the status authentication requirement of remotion testing and control system, based on the PKI structure, the suthentication technology of PKI used in the remotion testing and control system, this way strengthen the VPN security.Because of the designing of PKI system, the sign, the management and Confirmation of CA modle working well.The certificate provide the proof of status authentication,working for system.Due to the analysis of security structure of the remotion testing and control system, design the VPN gateway for the system.And the design foucses on the remotion testing and control system security modle, it makes the information turned to remotion user by the tunnel safty.This article finally has tested the PKI system, and provide the date of the VPN gateway with different conditions. Indicated through the test that, the system function is well, fit the design requirements, effectively enhance the system security.更多还原