电力企业移动安全接入平台①.PDFVIP

2014 年 第 23 卷 第 7 期 计 算 机 系 统 应 用 ① 电力企业移动安全接入平台 1 1 2 吴克河 , 崔文超 , 何健平 1(华北电力大学 控制与计算机工程学院, 北京 102206) 2(上海市电力公司 信息通信公司, 上海 200122) 摘 要: 电力企业承担着为社会经济发展提供安全、可持续电力供应的重要使命, 因此, 电力企业信息系统的安 全要求比普通企业要高. 随着电力企业信息化的快速推进, 各种远程移动终端与信息内网的数据交换需求日益 增长. 如何保证移动终端远程接入的安全已成为电力企业信息化建设中的关键问题. 在分析传统 SSL VPN 技术 的基础上, 针对电力企业信息安全建设的特点和特殊需求, 设计了一种适用于电力企业的新型移动安全接入平 台. 该平台能够支持多种移动终端的多因素认证和访问控制, 同时实现了 SSL 高速协议栈、数据隔离等功能, 有 效地解决了上面所提到的问题. 关键词: SSL VPN; 电力企业; 无线网络; 多类型终端认证; 双隧道模型; 协议栈 Wireless Security Access Platform in Power Utilities 1 1 2 WU Ke-He , CUI Wen-Chao , HE Jian-Ping 1(School of Computer and Control Engineering, North China Electric Power University, Beijing 102206, China) 2(Information and Communications Company, SMEPC, Shanghai 200122 , China) Abstract: Power utilities, whose crucial mission is to provide safe and sustainable power supply, have higher security requirements for the enterprise information system than ordinary enterprises. With the development of informatization for power utilities, the demand for data exchange between a variety of wireless remote terminals and Intranet is growing. How to guarantee the security of wireless remote access in power utilities has become a key problem. According to the characteristics and special needs of power utilities, this paper analyzes the traditional SSL VPN technology and designs a new secure wireless remote access platform based on SSL VPN for power utilities, which provides a new solution for secure wireless remote access in power utilities. Key words: SSL VPN; power utilities; wireless network; multi-type terminals authentication; twin tunnel model; protocol stack 电力企业作为关系国家能源安全