电力行业加密远程办公系统的研究与建设

Study and construction on encryption telecommuting system for electric power industry

为保障电力行业关键信息业务的远程加密传输,研究并建设运行了具有数据加密传输和远程用户证书认证功能的符合国家规定的商密级别的电力行业加密远程办公系统。分析SSLVPN和IPSecVPN方案2种技术方案,经论证选择IPSecVPN方案。在传输方面,采用已通过国家密码管理委员会认证的硬件芯片加密算法的数据加密传输技术实现硬件加密。在认证方面,采用基于证书的认证的暨强认证方式。在远程移动用户接入方面,实现了普通电话拨号、CDMA或GPRS无线网卡拨号、企业局域网接入等多种访问方式。建设了一定规模的实际运行系统,能保证电力行业远程办公系统的安全保密。

For the purpose of protecting the encryption transmission of the important information, the encryption telecommuting system with the function of encryption transmission and certificate authentication for electric power industry was studied and constructed, which is accord with the national commercial encryption level. Two kinds of technical scheme, SSL VPN and IPSec VPN, were analyzed, and IPSec VPN was adopted. The data encryption transmission technology realized by hardware chip was adopted to realize hardware encryption, which was authenticated by the national cryptogram management committee. The enhanced authentication based on certificate authentication method was adopted. Multi-access methods were realized, such as telephone dial up, CDMA wireless dial up, GPRS wireless dial up, enterprise LAN. The practically running encryption telecommuting system for electric power industry is established in a certain scope, which is capable of ensuring the security and secrecy of the important information transmission.