The High Safety Level, Operating Systems And Network Services Of Identification

Identification and Authentication (I&A) are critical technologies in Operating System (OS). Identification is to identify who the user is; Authentication is to authenticate that the user is who he claims. I&A is the foundation to realize the security mechanisms of OS. And the security of the I&A is the important safeguard of the whole security of OS.After referring to related security criterias of computer system, we designed and realized a secure operating system with higher security level, based on the source code of Linux. To support the new security mechanisms of Secure OS, this thesis describes the design and realization of the extended I&A mechanism. After extension, new security properties of users, security label and audit mask, are added to the I&A system, in order to support the mandatary access control (MAC) and audit system under the Secure OS. Out of the vulnerability of passwd authenrication, this thesis propose a design of passwd checker, to enforce the security of authentication process. In the same time, to futher the security of login process of root user, we propose a scheme of Certificate of Root User.Operatin System plus WWW Server make up of a network service platform in wide use. So the security of the whole platform is very critical. Finally, this thesis discusses and describes the design and realization of the I&A mechanism under a WWW Server with higer security level, on which we realize enhanced security model.