Network Resource Access Control Technology Research And Implementation

With the fast development of internet and World Wide Web, people can work more efficiently. It's easier to find and use information. And at the same time, how to secure data is facing many challenges. Nowadays, there are many ways to control people to access net, such as MAC Address Filtering and Firewall, etc. But they have a common limitation that they can only validate whether the host has the right to access net, while can not identify the users who surf the net.The dissertation is devoted to theoretical and practical study of Windows Network Techniques. The system discussed in the dissertation can identify the user's validity for accessing the net. The main contents are as follows:1. Windows Network Structure and Windows SPI Techniques are reviewed from theory and practice. Filtering the access to net using Windows SPI Techniques is discussed in order to identify the user's validity.2. To improve the Net Access Control System's (NACS) stability and security, this paper proposes and describes architecture which consists of three parts: Request Filter, Access Filter and Authentication Center. The Request Filter takes charge of filtering the out-connection of the client host; the Access Filter is in charge of filtering the in-connection of the server host; while the Authentication Center identifies the user's validity.3. The two filters are realized through Windows SPI (Service Provider Interface).