校园一卡通网络安全设计与实现

Campus Card Network Security Design and Implementation

随着校园一卡通系统功能的丰富和与第三方系统对接需求的增加,校园一卡通系统面临着诸多网络安全问题,为此,建立核心层、服务层、终端层三层安全模型,通过策略控制不同层级间不同设备的网络访问权限,使用防火墙的Trust、DMZ、Untrust的三个安全区域代替安全模型的三层结构,实现校园一卡通网络的安全管理,提高安全水平。

With the functions enriching and demand for third-party docking system increasing,the campus card system faces many network security issues.Therefore,it should establish the three-layer security model which consists of the core layer,service layer and terminal layer.Then by using some strategies to control the network access to the different devices of the different layers,it uses three security zones of the firewalls,Trust,DMZ,Untrust,instead of three-layer structure between the different levels of security model so as to achieve campus card network security management and improve the level of safety.