校际移动漫游的研究与实现

分析研究了高校对校际移动漫游建设的需求，从校际移动漫游的网络安全接入、校际移动漫游的网络认证和校际移动漫游中心的建设等3个方面，提出了使用中国强制性安全标准的WAPI证书，扩展漫游加密鉴权，叠加LDAP/RADIUS漫游认证的方式，结合漫游学校与归属学校的网络实际情况，分别采用返回归属学校认证和漫游中心认证两种漫游系统架构，在校际间实现了安全性能高、运行性能高和投入建设简洁的校际间的移动漫游，通过教育信息资源的共享，创造了更宽广的校际间的学术交流环境．
： Through the research on the wireless network construction in several top universities, their demand for the construction of intercollegiate mobile roaming is analyzed. Considering the safety access of intercollegiate mobile roaming, authentication of intercollegiate mobile roaming and construction of intercollegiate mobile roaming center of these three aspects, the certificate of Chinese mandatory safety standards, WAPI, is proposed. The certificate extends roaming authentication encryption and superimposes the method of LDAP/RADIUS roaming authentication. It also combines with the practical situation of roaming of schools and its belonging. It is respectively certificated by the affiliated school and roaming center. The solution can achieve high safety performance，high operation performance and simple construction of intercollegiate mobile network roaming. Through the education information resources sharing, a wider inter school academic communication environment is created