基于Web的RAP安全认证方案

A Web-based RAP Security Authentication Scheme

该文介绍了一种新的基于Web的安全远程访问解决方案:安全远程控制系统RAP(RemoteAccessPass)。文章概述了RAP的安全需求,并根据RAP基于Web的特征以及系统模型自身的特点,给出了一种C/S结构的分布式安全认证模型,并设计了基于消息认证码MAC技术的安全认证方案,最后对认证方案的安全性进行了分析和讨论。该方案在不改变防火墙和内部架构的基础上,实现了内部信息系统对外部访问者的安全认证。

RAP(Remote Access Pass) introduced in this paper is a new solution of Web-based security remote access.The paper summarizes the security requirements of RAP.According to the characters of the system module and the Web-based RAP,the paper designs a distributed security authentication module with the C/S module and proposes a MAC-based security authentication scheme.At last,it discusses and analyzes the security of the scheme above.Without changing the structure of the firewall and internal network,the scheme realizes the security authentication for outer visitor of internal information system?