改进的LDAP服务体系及其在电力系统PKI中的应用

Improved LDAP service architecture and its application in PKI of electric power system

随着电力系统信息网络建设的迅速发展,信息安全问题日益重要。PKI技术是目前广泛采用的安全解决方案,而轻量级目录访问协议LDAP是PKI技术的重要组成部分。针对传统LDAP系统负载过大,往往造成网络的堵塞的缺点,提出了改进的LDAP服务体系结构设计方法,并详细讨论了电力系统PKI中改进的LDAP服务体系的设计原则及其实施的总体的框架。此体系结构采用分区模式,在一定的同级LDAP区域中达到负载均衡。实例分析的结果证明了该方法的可行性。

With the rapid development of information networks in power systems, information security is becoming more and more important. PKI is a solution of security adopted widely, and LDAP is an important part of PKI. Aiming at the insufficiency of traditional LDAP service structure that a heavy load will lead to jam of networks, an improved LDAP service structure is proposed. The design principle and realization framework are dealt with in detail. The framework adopts the pattern of subarea, and load balancing is achieved among the LDAPs at same level. In the end, a practical example to realize the new framework in power system is given to prove that the improved LDAP server system is feasible.