军网身份鉴别系统的设计与实现

摘要

Authentication system in military network is designed based on symmetrical encryption scheme which has the attributes of high efficiency, centralized key management, compendious authentication protocol, small quantity of cipher processing, high efficiency, and it′s fit for authentication in area of LAN. This paper discuss the corresponding problems of design and implementation of authentication system in military network at length by introducing the hardware and software structure of system, designing of key database and cipher module, measures of enhancing the security of user end. Combined with the analysis of probable security hole in every part, the methods to improve the security of system are dissertated. The authentication system can meet the security require of the application system in military network.%基于对称密钥密码体制的军网身份鉴别系统，其主要特点是安全强度高，密钥采用集中管理方式，身份鉴别协议简洁，鉴别步骤少，密码处理量小，效率高，适合于局域网络环境下的身份鉴别。本文从系统的硬件组成和软件结构、密钥数据库和密码模块的设计、增强用户端安全性的措施等方面对军网域内身份鉴别系统设计与实现过程中的有关问题作了较详细的介绍。结合各个部分可能出现的安全漏洞，论述了增强系统安全性所采取的措施。军网身份鉴别系统满足了军网应用系统的安全需求。