基于PKI/PMI的IP宽带城域网安全应用解决方案

随着网络技术的发展演变，IP宽带城域网已成为宽带网络的发展方向，各种信息化应用都将基于IP技术。本在分析目前IP宽带城域网在安全应用与管理方面存在问题的基础上，首先简单介绍了PKI／PMI，然后阐述了如何应用基于PKI／PMI的智能化信任与授权技术来建立IP宽带城域网的可信任环境，如何利用数字证书来实现基于证书和端口的IP宽带城域网安全应用与管理模式，该模式类似于PSTN中基于号线的应用与管理模式，从而构建一个“可控制、可管理、可经营”的电信级IP宽带城域网，为各种信息化应用提供一个安全可信的基础电信网络平台。

A Solution to Secure Application of IP Broadband Metropolitan Area Network Based on PKI/PMI

With the evolvement of network and the development of technique,IP broadband metropolitan area network has become the mainstream of broadband network,all kinds of information application will use IP technique.This paper analyze the deficiencies about secure application and management of IP broadband metropolitan area network at present,then introduces PKI/PMI in simply,and expatiates how to apply intelligentized trust and authorization technique based on PKI/PMI to construct a trusted area of IP broadband metropolitan area network,and how to apply PKC/AC to realize a secure application and management mode of IP broadband metropolitan area network based on certificate and port,which resembles the management and application mode of PSTN based on number and line,so as to construct a IP broadband metropolitan area network which can be controlled and managed and operated,which provides a secure application telecommunication network platform for information application.