| With the development and popularization of Internet, it has gradually changed the ways of people's living and work, also brought great convenience to contemporary people's life, and created a great deal of wealth for society, enterprises and organizations. On the other hand, the security of Internet is becoming more and more prominent. The security problems of Internet are emerging one after another, which are growing increasingly intense.With the rapid development of our country's economy, our aviation industry is developing in the growing stage with unprecedented high speed. Our country's aviation industry is developing with a high speed which is as twice as that of GDP enabling both its total air traffic and cargo and passenger traffic carried to rank among the world's most advanced. And our country has become a huge aviation country in the world. Chongqing Airport has gotten onto the rapid development track. In 2006, the airport has handled 8.05 million passengers, 120,000 tons of cargo and mails, and ensured movements of 88,869 flights, representing increases of 21.3%, 20% and 22.28% respectively over the figures of the previous year. By the end of September in 2007, it has handled 7.75 million passengers, 102,000 tones of cargo and mail, and ensured movements of 78,733 flights. It is estimated that the increasing speed will exceed that of last year. So the increase of the passengers carried flow makes the information system face huge and severe test. And at the same time, information integrated system of airport is becoming more and more open, and developing series of internet businesses, such as check-in online, flight inquiry online, reservation online and so on, which make internal network threatened by trojan and viruses of Internet. And all the businesses'development brings more and more unsafe factors for airport information integrated system. This dissertation studies the security and reliability of information integrated system, preventing the invading of illegal users and proposing to build high reliable authentication system for all the users of system.The main aspects studied in the dissertation are as follows:Firstly, a brief description for the present security situation of Internet, domestic and foreign present situation and safe factors of airport information integrated system, are given in the dissertation.Secondly, the technique framework of airport information integrated system and proposes the feasibility and necessity of building airport authentication system are analyzed. And then, present symmetrical encryption algorithms and asymmetrical encryption algorithms, emphatically analyzes protocol specifications and its limitation of Kerberos are also analyzed. To counter its limitation, an improved plan basing on elliptic cryptographic system ECC is put forward, which mainly includes:①. Introducing ECC plus AES which has improved the first step of the authentication system, using random cipher key to improve former fixed cipher key of Kerberos to enhance robustness and security of authentication system.②. Introducing ECC cipher key among AS server, TGS server and application server, which has further improved the security between servers, and at the same time made cipher key of server be managed conveniently. Finally, we build testing environment to test improved authentication system of Kerberos.③. adhering to the principles of economy and practicality, improving the first step of CA authentication link, building a simple test environment, adopting user name and password authentication to replace the first step of Kerberos authentication system and taking a test for the identification authentication system of improved Kerberos.Testing results indicate that the security of the improved authentication system of Kerberos has been greatly improved. And it can take precautions against a variety of network attacks, and then improve the stability of the whole information system. The safety and stability of the system also make the development of the airport more rapid. |
PDF Full Text Request