【摘要】：智能樓宇是一種現(xiàn)代信息技術(shù)與傳統(tǒng)建筑科技相結(jié)合的產(chǎn)物。它集成了智能化的信息安全管理系統(tǒng),以建筑為基本平臺(tái),結(jié)合建筑設(shè)備、網(wǎng)絡(luò)通信系統(tǒng)和辦公自動(dòng)化系統(tǒng),是信息、網(wǎng)絡(luò)、系統(tǒng)、建筑、管理的最優(yōu)化組合。計(jì)算機(jī)信息技術(shù)是智能樓宇等建筑應(yīng)用中的關(guān)鍵技術(shù)。在智能樓宇各部分系統(tǒng)中,各種類型的設(shè)備通過(guò)互聯(lián)的網(wǎng)絡(luò)實(shí)現(xiàn)信息的傳輸、數(shù)據(jù)的收集和控制命令的發(fā)送與接收。本文闡述了當(dāng)前智能樓宇系統(tǒng)中在網(wǎng)絡(luò)信息安全方面存在的一些問(wèn)題;分析了密碼等信息安全技術(shù)在智能樓宇系統(tǒng)中應(yīng)用的可行性;提出了一系列基于PKI公共密鑰基礎(chǔ)技術(shù)的安全措施,結(jié)合實(shí)際工程需要,在智能樓宇系統(tǒng)中實(shí)施了PKI,在硬件和軟件兩方面構(gòu)筑了一系列智能樓宇信息安全的防護(hù)。主要內(nèi)容包括:1.在智能樓宇系統(tǒng)中實(shí)現(xiàn)了PKI公鑰基礎(chǔ)設(shè)施技術(shù)。通過(guò)利用PKI技術(shù),使用密碼安全算法來(lái)確保數(shù)據(jù)的秘密性、完整性、可認(rèn)證性和不可否認(rèn)性,保護(hù)智能樓宇系統(tǒng)中的信息安全。2.使用公鑰基礎(chǔ)設(shè)施技術(shù)對(duì)接入系統(tǒng)的設(shè)備進(jìn)行安全認(rèn)證。為了能夠?qū)尤朐O(shè)備進(jìn)行安全認(rèn)證,可信安全中心將給合法設(shè)備頒發(fā)安全證書,無(wú)安全認(rèn)證的設(shè)備接入系統(tǒng)將會(huì)被阻止接入,同時(shí)實(shí)現(xiàn)設(shè)備間信息的可信傳輸。3.提出了一個(gè)安全客戶端的概念。使用包含USB端口的CPU智能卡作為安全客戶端設(shè)備,能夠讓智能樓宇系統(tǒng)中的非專業(yè)化的實(shí)施人員輕松的進(jìn)行PKI的部署實(shí)施。根據(jù)傳統(tǒng)防火墻防外不防內(nèi)的弊病,提出了在智能樓宇系統(tǒng)中構(gòu)筑PKI的方案;為解決怎樣有效認(rèn)證接入設(shè)備的合法身份和非專業(yè)技術(shù)人員便捷的實(shí)施PKI,運(yùn)用了設(shè)備認(rèn)證開關(guān)、可信計(jì)算、安全客戶端等熱門安全技術(shù)。
[Abstract]:Intelligent building is a combination of modern information technology and traditional building technology. It integrates the intelligent information security management system, taking the building as the basic platform, unifies the building equipment, the network communication system and the office automation system, is the information, the network, the system, the building, the management optimization combination. Computer information technology is the key technology in building application such as intelligent building. In various parts of intelligent building systems, various types of devices transmit information, collect data and send and receive control commands through interconnected networks. This paper expounds some problems existing in the network information security in the intelligent building system, analyzes the feasibility of the application of the information security technology such as password in the intelligent building system. This paper puts forward a series of security measures based on PKI public key foundation technology, and implements PKI in intelligent building system in combination with practical engineering needs, and constructs a series of information security protection of intelligent building in both hardware and software. The main contents include: 1. The PKI public key infrastructure technology is implemented in the intelligent building system. By using PKI technology, the cryptographic security algorithm is used to ensure the confidentiality, integrity, authentication and non-repudiation of the data, and to protect the information security of the intelligent building system. Public key Infrastructure (PKI) is used to authenticate the access system. In order to authenticate the access equipment, the trusted security center will issue the security certificate to the legal equipment, and the unauthenticated equipment access system will be prevented from accessing, and the trusted transmission of information between the devices will be realized at the same time. A concept of secure client is proposed. Using a CPU smart card with a USB port as a secure client device, the non-professional implementers in the smart building system can easily deploy and implement the PKI. According to the disadvantages of the traditional firewall, the scheme of constructing PKI in the intelligent building system is put forward, and in order to solve the problem of how to effectively authenticate the legitimate identity of the access equipment and how to implement the PKI conveniently by non-professional technicians, the device authentication switch is used. Trusted computing, security client and other popular security technologies.
【學(xué)位授予單位】：解放軍信息工程大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2015
【分類號(hào)】：TU855

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 辛博然;;談?wù)剺怯钪悄芑默F(xiàn)狀與發(fā)展[J];科技信息;2012年23期

2 陳鵬;;一種機(jī)房建設(shè)系統(tǒng)集成的設(shè)計(jì)與實(shí)現(xiàn)[J];數(shù)字技術(shù)與應(yīng)用;2011年09期

3 向揚(yáng);;公鑰密碼算法及特點(diǎn)[J];湖南農(nóng)機(jī);2008年07期

4 辛陽(yáng);魏景芝;李超;楊義先;;基于PKI和PMI的生物認(rèn)證系統(tǒng)研究[J];電子與信息學(xué)報(bào);2008年01期

5 劉欣桃;曹元大;;一種屬性權(quán)威系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[J];計(jì)算機(jī)應(yīng)用;2007年01期

6 王中;;公鑰密碼體制綜述及展望[J];中國(guó)科技信息;2006年12期

7 佟君亮;;電子政務(wù)PKI/CA建設(shè)的研究[J];信息安全與通信保密;2006年06期

8 強(qiáng)勇軍 ,佘X ,謝鴻波;基于PKI的企業(yè)證書管理系統(tǒng)[J];信息安全與通信保密;2005年02期

9 高能,向繼,馮登國(guó);一種基于數(shù)字證書的網(wǎng)絡(luò)設(shè)備身份認(rèn)證機(jī)制[J];計(jì)算機(jī)工程;2004年12期

10 劉繼山,張承偉;PKI技術(shù)及其在網(wǎng)絡(luò)財(cái)務(wù)信息系統(tǒng)安全中的應(yīng)用探析[J];中國(guó)會(huì)計(jì)電算化;2004年06期

，

本文編號(hào)：2149731