提出了在SOCKS防火墙之间建立VPN的架构与技术的思想，利用SOCKS V5对认证方法的可扩充性，采用x.509规范与数字签名实现了SOCKS防火墙之间的证书及身份验证，并运用TLS协议协商数据加密算法与密钥对其数据进行加密传送，介绍了其关键技术的实现。%In this paper, a framwork and mechanism of making up VPN between SOCKS fire walls in Internet are proposed. Their identification are implemented using certificate verify supported by x.509 and digital signing, which are the authentication method extension to SOCKS V5 protocol. TLS protocol is also applied to the implement negotiation of their encryption algorithms and cryptographic keys which are used as data encryption and transmission. As well as some relative key techniques are introduced, a strong security system is shown by integrating the advantages of two protocols in this paper.
展开▼
