基于防火墙的分布系统安全体系结构

A Security Architecture for Distributed System Based on Firewall

根据OSI安全体系结构,应用各种安全机制,提出了一个基于防火墙的分布系统安全体系结构,并在此安全体系结构上,设计了一个远程端-端安全通信协议. 协议采用分层机制,应用非对称公钥体制对远程通信进行验证和密钥分配,提高了网络的安全性。

Applying all kinds of security mechanism,a security architecture for distributed system based on firewall has been proposed according to the OSI security architecture.A remote end to end security communication protocol has also been presented based on the proposed security architecture.The protocol adopts layers mechanism and applies non symmetric cryptographic system to implement authentication and key distribution for the remote communication.The protocol improves the networks security and makes it easy to manage the security of network.