构建可控的内网安全管理系统

以遵义供电局内网安全管理的目标为研究对象，构建一个可控的内网安全管理体系。根据遵义供电局的IT基础架构环境的特点和现状，提出了PKI／CA技术、AD域技术和端点准入技术三种技术无缝融合为一体的统一内网计算机身份认证的设想。通过前期调研、考察学习、二次开发等综合手段实现了实名制准入（即3合1认证）。表明了3合1认证的设想是科学的、先进的，符合构建可控的内网安全管理体系这一核心目标。

Constructing the connection of controllable security management system

This paper in network security management target of Zunyi Power Supply Bureau as the research object, constructs a control- lable network security management system. According to characteristics and current situation of the IT infrastructure environment in Zunyi Power Supply Bureau, it is proposed the idea of computer network identity authentication that the PKI/CA technology, AD domain technology and endpoint access technology integration together in this thesis. By the other comprehensive measures, such as, preliminary investigation, study tours and secondary development, it is achiecved to carry out the real - name system access （ 3 in 1 authentication）, and is shown that the concept of 3 in 1 authentication is the scientific, advanced and accord with the core target to construct the connection of controllable safety management system.