虚拟实验平台信息安全架构设计

Design of Information Security Architecture for Virtual Experiment Platform

依托"十一五"国家科技支撑计划重点项目《虚拟实验教学环境关键技术研究与应用示范》,构建一个开放、共享、高安全性的虚拟实验共享平台,使用户对实验的使用从传统的分散小群体模式提升到按需使用跨区域第三方运营的共享模式。本文提出了基于USB Key的CA认证体系,设计了虚拟实验网络的安全结构和试验平台的身份认证系统。用户通过USB Key认证登录后,即可使用本域内或远程的并行计算环境,按照系统提供的标准服务规范,与实验系统远程交互。

Relying on key projects of the ＂Eleventh Five-Year＂ National Science and Technology Supportive Key Project Key Technology Research and Practice Demonstration of the Virtual Experiment and Teaching Environment,the paper aims to construct an open,mutual sharing and highly-secure virtual experiment sharing platform,which enable users to promote the traditional separate small group mode to cross-regional sharing mode of third-party operating in accordance with demand.This paper proposes the CA certification system based on USB key by designing a security architecture of virtual experiment network and an identity authentication system of trial platform.Therefore,the users are able to take advantage of regional or remote parallel computing environment after logging in USB Key certification and accomplish remote interaction with the experimental system in accordance with standard services provided by the system specifications.