中国建设银行总行清算网络安全方案(草案)引言............................................................................................................3一、 需求分析..........................................................................................41．1 清算网络拓扑结构......................................................................................................................41．2 清算业务系统..............................................................................................................................41．3 安全目标......................................................................................................................................5二、总体方案设计....................................................................................62．1 设计原则......................................................................................................................................62．2 设计思路......................................................................................................................................6三、加解密、加解押、身份认证、数字签名机制实现方案................73．1 方案论述.........................................................83．2 安全性分析......................................................10四、产品配置方案..................................................................................114．1 加密设备选型............................................................................................................................114．1．1 功能和特点...................................................114．1．2 加密校验卡的性能.............................................134．1．3 加密校验卡在安全方案中的应用.................................144．2 配置方案....................................................................................................................................174．2．1 总清算中心配置分析...........................................174．2．2 一级清...
