基于PKI的内网信息安全访问控制体系设计与实现

摘要

Main problem of the safety protection for involved secret computer information system is presented, Though referencing the standard of the safety protection for involved secret computer information system and studying the technology of information safety protection. A way is put forward to design secure model of information safety access control system based on public key infrastructure (PKI) technology particularly. With integration of CA, terminal protection and SSL security gateway, the secure model will keep the confidentiality, the integrity and the usability ofencryption data transmission. The application results show that the system can lead to security and reliability, which is of certain valuable reference to information security management of the similar corresponding systems.%为解决内网信息安全管理问题,依据安全等级防护标准和信息安全技术的研究,提出了一种基于公开密钥基础设施(PKI)在内部网构建信息安全访问控制体系的设计模型.该模型通过身份认证、终端防护、SSL安全认证网关的有效结合,建立由终端至涉密资源之间可信、完整、有效的信息安全传输机制.应用实例表明了该方法在实际信息安全访问控制中的可靠性和有效性.