| With more and more insecurity behavior which cannot be solved well by the traditional fire wall technology in inner network, this paper investigate the current status of the inner network at first, after analyzing the main problems of the inner network security, according to my reference, there are many schemes for the solution of the inner network security, after analyzing all kinds of technologies of the package interception that each has its own advantages and disadvantages. A new encryption communication scheme based on the package interception technology of Winsock2 SPI in inner network is presented in this paper with the demand of the fact: After using the package interception technology of SPI, use the access control rules to complete the filtration of the package, and then use the DES arithmetic to accomplish the encryption of it. So this scheme has accomplished the secure communication of inner network combining with the access control technology.There are three aspects mainly in this paper: first it uses Winsock2 SPI package interception technology to accomplish the design without any modification of the upper application program. Second it proposes the technology approach of the secure communication of the host computer which concretely using process,IP address,socket port,special keyword in package and encryption of the package to complete the secure data transmission based on the access control of the host computer. Third it accomplishes a new data encryption transmission model which is different from the usual system which encrypts the data before using the Winsock to send and decrypt the data after receives. So the system can transfer data packets in security without changing the condition of the communication system and solve the insecurity hidden trouble in the intranet communication. It is an all-purpose system which is more flexible and proved to be valuable to strengthen the intranet host computer communication security. |
PDF Full Text Request