摘要
以风险分析为基础、安全保密服务为目标，分析了各种安全保密机制。以ＩＳＯ／ＯＳＩ安全体系结构为背景给出了一种计算机网络安全与保密的实现方案，使网络能以服务选项的方式提供对等实体鉴别、数据保密、数据完整性、数据源点鉴别、禁止否认以及访问控制等安全保密服务。
Through analysing the network risk, security services and a variety of security mechanisms, and basing on ISO/OSI Security Architecture, this paper gives a design of security in computer networks which can provide users with optional services of peer entity authentication, data confidentiality, data integrity, data secure recognition and denying prohibition.
关键词
计算机网络
安全
保密
设计
computer networks
secret communication
