论文部分内容阅读
传输和接入安全一直是电子政务、金融、电信等大型网络试图解决的问题。在基于IPSec协议的Sec VPN技术出现以前,一般采用“信道加密机”来解决这类安全问题,但这种方式存在以下缺点:(1)需要针对不同的传输协议配置信“道加密机,如果网络使用多种信道则需要配置多种信道加密机,使得安全系统变得很复杂,增加了建设、管理难度;(2)信道加密机仅针对特定传输协议进行
Transmission and access security has long been a problem that large networks such as e-government, finance and telecommunications are trying to solve. Before the emergence of Sec VPN technology based on IPSec protocol, “channel encryptor” was generally used to solve this kind of security problem. However, this method has the following disadvantages: (1) It is necessary to configure the channel encryptor for different transport protocols. If Network using a variety of channels need to configure a variety of channel encryption machine, making the security system becomes very complex, increasing the difficulty of construction and management; (2) channel cipher only for a specific transport protocol