Design And Realization Of A LAN Security Platform Based On Authentication

With the development of computer network technology, network security is becoming more and more important. The security of communication and data in the LAN(Local Area Network) is a hotspot in the fields of network security. The traditional network security technology like the fire wall can only protect independent computers but can not control the data leak and unauthenticated access.After analyzing the network security technologies in existence, by combining the USB Key(Universal Serial Bus Key) authentication, the AES(Advanced Encryption Standard) algorithm and the Winsock 2 SPI(Service Provider Interface) technology, a LAN security platform based on authentication is constructed. Based on the principles of security, stability and easy to use, the platform's architecture, workflow and detailed module design are displayed.Based on the whole design of the platform, users'identification information and database frame are defined, besides integrated messages which transmitted between clients and server. The communication between client and server which is implemented by using completion port can be very effective when more I/O (Input/Output) requests come from client. Winsock 2 SPI technology is used to intercept network data packets and then the packets are encrypted by AES algorithm, so data and communications security in the upper platform application is effectively improved.The factual application of the LAN security platform based on authentication indicates that it can protect the server from hackers'attack and malicious access; it can also guarantee that the communication between clients and server will not be monitored and stolen. The security platform is independent from upper application so it can afford various applications at the same time and work stably and efficiently.