计算机桌面安全防护系统安全管理功能设计

Security management function design of computer security defence system

为解决计算机桌面的安全防护问题,在实现安全防护基本功能的基础上,设计了系统安全管理功能,用于对系统各角色进行管理。根据计算机桌面安全防护系统总体设计需求,在借鉴公钥基础设施(PKI)管理模式的基础上,结合电子钥匙设计了具备用户权限分配、证书生成管理、身份认证协议、加密算法选择和会话密钥协商等功能的安全管理功能模块。经过测试和分析结果表明,设计的安全管理功能较好解决计算机桌面安全防护系统的安全管理问题。

To solve the security defence problems of computer desktop, the base defence function is developed and the security management function is designed. Accoring to the security design requirement of computer security defence system, the security management function based on USBkey is designed. It makes up of user authority management, certification management, authentication protocol, encrypt arithmetic selection and conversation key negotiation. It solves the security management problems of computer security defence system. In running process it insures the whole security of computer security defence system.