适用于以太网的密钥管理技术研究

Key Management Technology Suitable for Ethernet

以太网技术以其开放性、经济性和易用性等优势得到越来越广泛的应用。如何在以太网络上建立安全、可靠的涉密信息传输通道成为亟待解决的问题,基于以太网进行数据保护的安全产品和系统应运而生。依据以太网络的通信模式和安全威胁分析,研究了组密钥管理的一般模型,提出适用于以太网点对多点通信特点的基于证书的密钥管理方案,为以太网数据保护的产品研制提供了一个可行的方案。

Ethernet technology, for its openness, economy and easy use etc., is applied more and more widely, and how to transmit the classified information securely and reliably on Ethernet becomes a problem demanding prompt solution. Thus the data protection devices and systems based on Ethernet emerge as the times demand. In accordance with the communication mode of and the safety threat on Ethernet network, the general model of group key management is studied, and the key management design suitable for point-to-multipoint communication of Ethernet is proposed. The design provides a feasible program for the development of Ethernet data protection devices and systems