移动端VPN技术在专用网络中应用的安全性研究

Research on security of application of mobile VPN technology in private network

我国移动VPN技术的研发起步较晚,当前仍处于初级阶段,需要根据安全技术发展情况引入WPKI技术,制定科学可行的安全改进方案,实现全面移动VPN目标。文章首先重点探究了VPN应用中面临的安全问题,包括IMSI存在的明文传输问题、认证向量组的明文传输问题、通信数据的明文传输问题等;其次对移动VPN的关键安全技术、运行流程、安全性进行分析,使证书能在网络实体内得到高效应用,在相同或者不同CA范围内均可实现端到端加密;最后提出移动VPN安全机制的完善措施。在智能网业务飞速发展的背景下,文章提出通过明确安全目标、制定整体方案、完善运行流程等方式,使VPN用户的合法权益得到进一步保障。

The research and development of mobile VPN technology in China started late,and is still in the initial stage.It is necessary to introduce WPKI technology according to the development of safety technology,formulate scientific and feasible safety improvement plan,and achieve the goal of comprehensive mobile VPN.The article focuses on the security problems in VPN application,including IMSI explicit transmission,communication data,the key security technology,operation process and security of mobile VPN,so that certificate can be efficiently applied in network entity,end-to-end encryption in the same or different CA range;and finally the improvement measures of mobile VPN security mechanism.Based on clear security goals,formulate the overall plan,improve the operation process and other ways,under the rapid development of intelligent network business,the legitimate rights and interests of VPN users are further guaranteed.