PKI-based Security Authentication Of Newly Firewall

As a part of the research in "Newly Security Firewall",the thesis firstly proposes the importance of Firewall and the architecture of Public Key Infrastructure in the environment of Internet.Then,it describes the advantages and disadvantages of the authentication methods that are mostly used by Firewall.These methods include password based authentication,operating system based authentication and third-party server based authentication.And it exposes the new requirements of Newly Security Firewall.To solve the problems that authentications faced with,the thesis gives the designing model about PKI's implementation in Firewall.During the course of analysis and designing of PKI based security authentication in newly Firewall,the thesis describes in detail the integration of PKI based security authentication and Firewall from five different parts such as the improvement of Firewall's immunity,authentication of multi-users,efficiency of authentication while data packets flood in Firewall,cooperation between double Firewalls and single-signed-on among several domains affected by different Firewalls.In each part,it gives the designing model and analyze the feasibility of the model.