通信加密与数字认证在企业信息系统的应用

分析了电力企业一体化信息系统通信与身份认证的安全需求,并提出了解决方法,阐述了在已建成的＂数字证书体系＂和＂Novell目录系统＂基础上,集成基于安全信息层的安全传输协议和基于数字证书X.509标准的双因子数字认证技术,实现了信息系统通信加密与增强认证。实践证明,该方案提高了三级及以上级别信息系统的安全性,并为建设支撑坚强智能电网的信息网络安全接入奠定了基础。

Application of Communications Encryption and Digital Authentication Technology in Enterprise Information System

Security requirements on communication and authentication of enterprise integrated information system platform are analyzed,and solutions are proposed.On the basis of the ＂Digital certificate system＂ and ＂Novell directory system＂ completed,the communication encryption and enhanced authentication of the information system are implemented by integrating security protocols and the two-factor digital certificate technologies,based on secure socket layer and X.509 standards respectively.It is proved that,information system security of the three-level and above has been greatly increased,and the foundation is laid for supporting information system security access control of strong smart-grid.