采用PKI增强VPN安全的研究

VPN技术改进了通信协议的安全机制，但因其身份鉴别不完善而影响到在复杂环境下的网络安全。PKI是由公开密钥密码技术、数字证书、证书认证机构和安全策略等基本成分共同组成的安全基础设施。PKI技术能够提供身份鉴别和角色控制服务。文章分析了PKI和VPN技术的各自安全特点，采用PKI技术与VPN技术相结合的方法，增强了系统的身份鉴别和访问控制能力。

Research in using PKI to enhance VPN security

VPN has improved the network security which is caused by lack of security mechanism of communication protocol. Because the identity authentication is not perfect in VPN,it will affect the network security in the complicated environment.PKI is a trusted Public Key Infrastructure which is composed of public key technology, digital signature,CA and security strategy.PKI can provide identity authentication and role access control service. This thesis analyzes the characters of PKI and VPN security separately,and designs a scheme to enhance the identity authentication and role access control through using PKI in VPN.