Research Of Access Control In The SSL VPN And Implement Experiment

At present, with the increase of remote access, SSL VPN which is inexpensive and simple and has good security access control mechanism causes people's extensive concern more and more. It has a broad application prospects. Access control is widely used in the operation system data base and distributed system, and RBAC(Role-Based Access Control) is known to be the most efficiant method to solve the access control of united source in the giant corporation.Because of the background above, this paper researchs SSL protocol and some of the key technologies of this system. Then it compars various implementation of VPN with each other and analyses performance of the system. According to structure of SSL VPN, this paper designs a new moudule PRBAC(Proxy Role-Based Access Control) based on RBAC. This module defines a concept of proxy user, which inherits from external user. It can transfrom the external users'access control into proxy users'access control, which can improve performance of access control module.Refering to the system of SSL VPN, this paper design an experiment system of SSL VPN. Students can build a SSL VPN system and analyse the data flow and performance instead of configuring different module of SSL VPN . To simplify the experiment and help students to comprehend SSL VPN well, the system is divided into three modules and each module is part of SSL VPN system so that students can easily debug. Students can observe data flow by sniffer in each module so that they can learn the basic knowledge of SSL VPN. So the experiment can help the students to learn more about SSL VPN.