Internet/Intranet互联环境中的安全认证和密钥分配
SECURE AUTHENTICATION AND KEY DISTRIBUTION PROTOCOLS FOR INTERNET/INTRANET ENVIRONMENT
-
摘要: 本文提出了解决Internet/Intranet互联环境安全性问题的模式,针对不同的Intranet的网络结构,提出了适用的安全模式,设计了相应的认证和密钥分配协议,并考虑了协议在开放系统互联OSI结构的安全管理问题.协议采用分层机制,在低层采用改进的Kerberos协议实现局域网内的认证和密钥分配,而高层的网间认证和密钥分配协议则根据安全模式的不同要求采用单钥体制,或公钥体制来设计。协议能够为Internet的各种远程访问提供安全保护。Abstract: In this paper,the solutions to the security issues of Internet/Intranet environment are proposed.And authentication and key distribution protocols are presented,which can be incorporated into the OSI (Open System Interconnection) architecture.The protocol adopt modified Kerberos authentication protocol at the lower sublayer, and design authenticated key exchange protocols using symmetric or asymmetric cryptosystem at the upper sublayer for different solutions.The protocols can be used for remote access applications,thus it is benefit to security manage of Intranet.
-
徐胜波，王新梅．Internet网络环境中认证和密钥分配的研究．通信学报，1997，18(12)：83-88.[2]ISO 7498-2，Information processing system-Open system intercomnection reference model，security architecture,1988[3]Draft Recommendation X.509，The Directory-Authentication Framework，Version 7：Glouccester．[4]Chokhani S Towards a national public key infrastructture．IEEE Comm．Mag.,1994，32(9)：70-75．[5]Rivest R，shamir A．Adleman L．A method for obtaining digital signature and public key cryptosystems．Comm．Of ACM.,1978，21(2)：120-126．[6]Diffie W, Hellman M E．New direction in cryptography．IEEE Trans，on IT，1976，IT-22(6)：644-654．[7]Hwang T，Ku W Reparable key distribution protocols for internet environments．IEEE Trans．On Comm.,1995，COM-43(5)：1947-1949.[8]Fumy W．(Local area) Network Security Computer Security and Industrial Cryptography，Lecture，Notion Computer Science,EAST Course，Belgium：1991，211-226．[9]Fumy W，Leclerc M．Integration of key management protocol into the OSI architecture，Proc．Of CS90：Symposium on Computer Security：Fondazione Ugo Bordoni：1991，151-159．[10]Diffie w Security for the DoD transmission control protocol Proc．Of Crypto85：Springer LNCS 218，1986，108-127．[11]Diffie w，Van Oorschot P C，Wiener M J．Authentication and authenticated key exchange.design，code and cryptography 1992：120-126. -
计量
- 文章访问数: 1751
- HTML全文浏览量: 74
- PDF下载量: 549
- 被引次数: 0
下载:
