设计了一种高效、安全的用户认证方案 ,该方案无需修改客户端源程序 ,可以很好地嵌入到实际使用的防火墙系统中 .该方案对用户的认证是基于用户的权限进行的 ,定义了良好的资源访问控制模式 ,非常适合实际系统对内部网络用户有认证要求的场合 .此方案可以很方便地进行扩充 ,以实现内部网络用户流量的保密性 ,具有很好的实际应用前景 Designed an efficient and secure user authentication scheme that can be well embedded in the actual use of the firewall system without modifying the client source program.The authentication of the user is based on the user’s permissions, Good resource access control mode is very suitable for the actual system for internal network users have authentication requirements of the occasion.This scheme can be easily expanded in order to achieve internal network user traffic confidentiality, has good practical application prospects