IP核网络管理系统的安全机制

IP DATA SECURITY SYSTEM ON THE INTERNET

在"通用设计模块(IP核)管理系统的研制与开发"这一课题中,IP数据的价值与特殊敏感性要求确保IP数据在网络交易传输中的安全性,包括保护IP数据提供者的知识产权以及保证IP用户能够得到可靠、准确的IP数据。因此,网络数据安全机制的设计及实现成为本课题的重点。介绍了采用对称密钥加密算法AES(Advanced Encryption Standard)与非对称密钥加密算法ECC(Elliptic Curve Cryptography)相结合的双加密机制的设计,通过将JSP页面嵌套在J2EE构架中实现了IP数据在网络中的安全传送。整个"通用设计模块(IP核)管理系统"已通过课题验收,并投入了试运行。

Data security system is one of the most important parts in the project of development and research of IP management system because of the value and special sensitivity of IP data. There are three points which have to be ensured in the data security system： To make sure that IP data will not be easily gotten by illegal approaches during the process of transmission;To protect IP providers＇ interests and avoid abuse of IP data;To make sure that the receivers will obtain the exact IP data which they want. The data security system is made up of two encryptions, Advanced Encryption Standard （AES） and Elliptic Curve Cryptography （ECC）. It is implemented on the Internet by adding JSP pages into J2EE structure. The whole project has been approved,and it runs well.