校园网网络用户安全身份认证体系分析

User Security Authentication System for Campus Network

目的:介绍并分析了当前校园网网络用户安全身份认证体系结构,指出了当前校园网建设中网络用户身份认证所面临的诸多安全性问题和存在的隐患。方法:通过对TCP/IP网络层次结构模型中各层现有身份认证技术和协议的分析比较,提出了在链路层使用接入控制、网络层使用连接控制、应用层使用统一认证的校园网安全身份认证解决方案。结果:该方案可以提高校园网身份认证的安全级别。结论:增强网络系统的安全性和可靠性。

Objective To introduce and analyze the current user security authentication system in the campus network and point out the secure problems and hidden dangers of the correspondence entities in the campus network. Methods The authentication technologies and protocols in the TCP/IP network model were compared. It was proposed that the campus network security authentication solution should include access control in data link layer, connection control in network layer and unified authentication in application layer. Results The solution could improve the campus network authentication security rank. Conclusion The security and reliability of the network system are enhanced. [Chinese Medical Equipment Journal,2008,29（4） ：42-44]