對傳統(tǒng)虛擬專用網(wǎng)的概念進(jìn)行擴(kuò)展，提出并建立了分布式虛擬專用網(wǎng)的模型，解決了傳統(tǒng)虛擬專用網(wǎng)系統(tǒng)內(nèi)部無法防止的搭線竊聽問題。對分布式虛擬專用網(wǎng)的性能改進(jìn)作了定量分析，分析結(jié)果顯示其可以大幅度提高系統(tǒng)的并行性，且單個節(jié)點存儲容量從O(n2)下降到O()，實現(xiàn)增長線性化，并給出一個系統(tǒng)實現(xiàn)，測試結(jié)果表明可以顯著改善系統(tǒng)的安全性和提高效率。

關(guān) 鍵 詞 虛擬專用網(wǎng); 分布式虛擬專用網(wǎng); IP安全性; 安全策略數(shù)據(jù)庫; 安全關(guān)聯(lián)數(shù)據(jù)庫

Raise the concept of distributed VPN and create the system model, which extend the concept of classical VPN. From the as aspects of security, it overcome the classical VPN’s disadvantages of failing to protect the internal communication of LANs. The result of DVPN's performance analyzing indicates that it can enhance the parallelity of the system,reduce the storage requirement from complexity O(2n) to O() and make the database grow linearly. As well,give a system implementation, which proves that it can improve the security and efficiency of the system.