基于统一身份认证平台的局域网安全设计

Security Design of LAN Based on Unified Identity Authentication Platform

对于局域网进行安全设计时首先要以提高网络系统安全性为目标,其次还要保证局域网上的应用系统的安全性满足相应标准。对服务器、个人终端、网络接入设备、防火墙在内的所有参与到局域网服务过程中的节点进行分析研究,判断出网络系统安全存在的薄弱点。在这其中,"准入准出"平台的设计和建立是首先要考虑的技术手段。基于"统一身份认证"这一普遍使用的"准入准出"技术,以宝鸡文理学院局域网网络安全设计和建设为实例,讨论统一身份认证技术在网络安全中的应用。首先研究了统一认证平台的设计思想和具体功能,在这一基础上,画出了该平台的体系架构图;然后分别从目录服务、用户(角色)管理、同步管理、认证过程和授权管理等五个方面详细阐述了统一认证平台的设计,为局域网在安全规划和设计方面提供了有益的参考。

For the safety design of LAN,we must first aim at improving the security of network system,and then ensure the security of application system on LAN to meet the corresponding standards.All nodes involved in the LAN service process,including servers,personal terminals,network access devices and firewalls,are analyzed,and the weakness of network security is judged.Firstly,the design and establishment of the“access&exit”platform is to be considered.Taking the design and construction of LAN security in Baoji University of Arts and Sciences as an example,the application of unified identity authentication technology in network security is discussed.Firstly,the design idea and specific function of the unified authentication platform are studied.On this basis,the architecture diagram of the platform is drawn.Then,the design of unified authentication platform is elaborated from five aspects:directory service,user role management,synchronization management,authentication process and authorization management,which provides a useful reference for the LAN in security planning and design.