CH K S 1. Ch k s l thng tin i km d liu nhm mc ch xc thc ngi ch ca d liu . Ch k s bao gm cp kha cng khai v b mt.

- Kha cng khai dng to ch k s. - Kha b mt dng thm nh, xc thc ch k s. V mt k thut, cng ngh ch k s da trn h tng m ha cng khai PKI . Cng ngh ny m bo ch k s khi c mt ngi no to ra l duy nht, ch c ngi s hu kha b mt mi c th to ra ch k s. Qu trnh s dng ch k s c 2 giai on: - To ch k. - Kim tra ch k. to ra ch k s cn phi ng k chng t s v to kha b mt lu vo trong PKI Token vi cc nh cung cp dch v chng thc ch k s. M ha d liu: - M ha i xng: l tt c nhng gii thut m ha ch s dng mt kha trong vic m ha v gii m. - M ha bt i xng: l nhng gii thut m ha s dng 2 kha public-key v private-key. M ha bng kha ny th ch c th gii m bng kha kia. Quy trnh thm nh ch k s: - To ch k s: To ch k s bng kha b mt c cung cp bi nhng nh cung cp, chng thc ch k s. - Kim tra ch k: So snh tnh ng nht ca kha cng khai bn ch k s ca ngi gi v kha cng khai ca nh cung cp v chng thc ch k s. u, nhc ca ch k s: - u im: i. Kh nng xc nh ngun gc. ii. Tnh ton vn. iii. Tnh khng th ph nhn. - Nhc im: i. VN vic s dng ch k s cha ph bin. ii. Thiu c s php l v s dng ch k s. IN TON M MY 1. in ton m my l mt tng th cc thnh phn ca cng ngh thng tin bao gm: cc phn mm, h thng h tng, cc dch v trc tuyn v thng tin m trng tm da vo Internet xy dng v hot ng. in ton m my s to ra xu th dch v ha cc cc nhu cu v thng tin v cc sn phm o trn Internet. Ngi dng ch cn my tnh kt ni Internet v trnh duyt s dng dch v ca cc nh cung cp ng dng,dch v trn cc m my. u v nhc im ca in ton m my: - u im: i. Tc x l nhanh. ii. Chi ph u t c s h tng v nhn lc c ti thiu ha. iii. Khng b hn ch v phn cng. iv. tin cy cao. - Nhc im: i. Tnh ring t. ii. Tnh sn dng. iii. Mt d liu. iv. Tnh di ng ca d liu v quyn s hu. 1

2.

3.

4.

5.

2.

3.

4. 5.

6.

v. Tnh bo mt. Cu trc phn lp ca in ton m my. - Client: bao gm phn cng v phn mm da vo khch hng c th truy cp v s dng cc ng dng dch v. - Application: Qun l v phn phi cc dch v phn mm thng qua Internet. - Platform: Cung cp nn tng cho in ton v cc gii php ca dch v, chi phi n cu trc h tng ca m my. - Infrastructure: Cung cp h tng my tnh s dng dch v. Khch hng ko cn quan tm n cu hnh my s dng dch v. - Server: bao gm cc sn phm phn cng, phn mm my tnh, c thit k v xy dng c bit cung cp cc dch v m my. ng dng ca in ton m my: cung cp nn tng, h tng, phn mm theo dng dch v cho thu bao dnh cho khch hng. Cc dch v in ton m my: - IaaS: Dch v cung cp ti nguyn mng trn m my(my ch, thit b mng, b nh ). +Cc c trng: Cung cp ti nguyn di dng dch v. Kh nng m rng linh hot. Chi ph thay i theo thc t. Nhiu khch hng c th dng chung ti nguyn. - PaaS: Cung cp nn tng tnh ton v l mt tp cc gii php nhiu lp h tr vic trin khai ng dng trn Internet. - SaaS: Cung cp cc dch v theo yu cu ca ngi s dng. C kh nng qun l vic s dng dch v ca khch hng, khi khch hng s dng dch v ca nh cung cp. Cc m hnh trin khai in ton m my: - m my doanh nghip: Cung cp cho cc doanh nghip phc v mc ch kinh doanh. - m my chung: L m hnh m my c chia s bi mt t chc cho cng ng ngi dng thuc t chc . - m my cng cng: L dch v m my c ngi bn cung cp. Chng c lu tr y v c nh cung cp m my qun l. - m my lai: L s kt hp gia m my cng cng v ring. Nhng m my ny thng do doanh nghip to ra v trch nhim qun l s c phn chia gia doanh nghip v nh cung cp m my cng cng v ring. DNS

1.

hostname dng phn bit cc my tnh vi nhau khi ha chung vo mt mng li cc my tnh(Internet). 2. My ch DNS nh x tn min(hostname) my tnh thnh a ch IP nhm mc ch qun l. 3. DNS c thi hnh nh mt giao thc tng Application trong mng TCP/IP. 4. Nu mi root name server trn mng Internet khng lin lc c th mi yu cu phn gii u khng thc hin c. 5. C ch phn gii tn min: Phn gii tn thnh IP: Client s gi yu cu cn phn gii a ch IP ca my tnh c tn girigiri.gbrmpa.gov.au n name server cc b. Khi nhn yu cu t Resolver, Name Server cc b s phn tch tn ny v xt xem tn min ny c do mnh qun l hay khng. Nu nh tn min do Server cc b qun l, n s tr li a ch IP ca tn my ngay cho Resolver. Ngc li, server cc b s truy vn n mt Root Name Server gn nht m n bit c. Root Name Server s tr li a ch IP ca Name Server qun l min au. My ch name server cc b li hi tip name server qun l min au v c tham chiu n my ch qun l min gov.au. My ch qun l gov.au ch dn my name server cc b tham chiu n my ch 2

qun l min gbrmpa.gov.au. Cui cng my name server cc b truy vn my ch qun l min gbrmpa.gov.au v nhn c cu tr li. C 2 dng truy vn: quy v tng tc. 6. Cc loi Zone: Primary Zone: Cho php c v ghi CSDL. Secondary Zone: Cho php c bn sao CSDL. Stub Zone: Cha bn sao CSDL ca zone no , n ch cha 1 vi RR. 7. y quyn: Mt tn min c th t chc thnh nhiu min con, mi min con c th y quyn cho mt t chc khc v t chc chu trch nhim duy tr thng tin trong min con ny. Khng phi tt c min con u c y quyn, c th ch c vi min con c y quyn. 8. Forwarders: L k thut cho php Name Server ni b chuyn yu cu truy vn cho cc Name Server khc phn gii tn min. 9. Dynamic DNS: L phng thc nh x tn min ti a ch IP c tn xut thay i cao. Chng trnh ny gim st s thay i IP ti host ca my tnh ca ngi s dng v lin h vi h thng DNS mi khi a ch IP ca host ny b thay i v sau update thng tin vo CSDL DNS v s thay i ca a ch . 10. Zone l vng qun l tn min trong DNS. IPSEC & SSL 1. IPSEC l giao thc, dch vu cung cp cc gii php bo mt cho IP, lm vic tng IP. Nhng thnh phn chnh ca IPSEC: - M ha ngi dng ring. - Chng thc gi tin. - Bo v mt cch chc chn trc cc cuc tn cng bo mt. - Hai ch bo mt l tunnel v transport m h thng mng cn. 2. Cu trc bo mt ca IPSEC. - S dng cc giao thc cung cp m nhm bo mt gi tin trong qu trnh truyn. - Cung cp phng thc xc thc. - Thit lp cc phng thc m ha. 3. Hai giao thc chnh c s dng trong IPSEC l AH v ESP, c hai u h tr cc thnh phn sau: xc thc, m ha, thut ton bng bm. Chnh sch bo mt, qun l, trao i kha bo mt. 4. Hai ch chnh trong IPSEC l transport v tunnel. 5. VPN: Cng ngh xy dng h thng mng ring o nhm p ng nhu cu chia s thng tin, truy cp t xa v tit kim chi ph.VPN cho php cc my tnh truyn thng vi nhau thng qua mt mi trng chia s nh mng Internet nhng vn m bo c tnh ring t v an ton d liu. 6. Qu trnh chng thc v m ha d liu ca IPSEC: - AH: M ha header ca gi tin phng chng cc trng hp ip spoofing hay man in the middle attack. - ESP: M ha ni dung ca thng tin. 7. SSL: Giao thc truyn t thng tin mt cch an ton trn mng. 8. SSL kt hp nhng yu t sau thit lp mt giao dch an ton: - Xc thc. - M ha. - Ton vn d liu. 9. Cu trc SSL: Giao thc SSL gm hai phn chnh, SSL Record Protocol v mt s giao thc con SSL c xp lp trn n Trong cc giao thc con SSL th giao thc SSL Handshake Protocol l quang trong nht. N c nhim v xc thc v trao i kha, khi to v ng b ha cc tham s bo mt v thng tin trng thi tng ng c t mt trong hai im cui ca mt session hoc ni kt SSL. 3

SSL Alert Protocol c s dng chuyn cc cnh bo thng qua SSL Record Protocol. Mi cnh bo gm 2 phn, mt mc cnh bo v mt m t cnh bo. SSL ChangeCipherSpec Protocol c s dng thay i gia mt thng s mt m ny v mt thng s mt m khc. Mc d thng s mt m thng c thay i cui mt s thit lp quan h SSL, nhng n cng c th c thay i vo bt k thi im sau . SSL Record Protocol nhn d liu t cc giao thc con SSL lp cao hn v x l vic phn on, nn, xc thc v m ha d liu. Chnh xc hn, giao thc ny ly mt khi d liu c kch c ty lm d liu nhp v to mt lot cc bn ghi nh hn hoc bng 16,383 byte. VoIP 1. VoIP l cng ngh truyn ting ni ca ngi qua mng thng tin s dng giao thc TCP/IP. N s dng cc gi d liu IP vi thng tin c truyn ti l m ha ca m thanh. S dng cng ngh chuyn mch gi. thc hin c iu ny th in thoi thng c tch hp sn cc nghi thc bo hiu chun SIP hay H.323 vo IP ca tng i, doanh nghip hay nh cung cp dch v. u v nhc ca VoIP. - u im: chi ph r, gn nh bng 0. - Nhc im: cht lng cuc gi ko c m bo tt, vn cn tnh trng tr ting. Cc giao thc trong VoIP: - SIP. - SGCP. - MGCP. - H323. - H323 khng ch c dng truyn m thanh trn Internet v cn c dng truyn video trn mng Internet. Cc thnh phn trong giao thc H323. - Terminal: Thit b u cui, c th l PC hay IP Phone thc hin chc nng gi hay nhn cuc gi. - Gateway: l cu ni v ch tham gia vo mt cuc gi khi c s chuyn tip t mng H323 sang cc mng khc nh SIP, MGCP - GateKeeper: ng vai tr l nhng im trung tm trong m hnh mng H323. Thc hin iu khin cc cuc gi u cui H323. - Multipoint Control Unit: Cung cp hi thoi vi s bn tham gia nhiu hn 2. N gm 2 thnh phn: B iu khin a im; B x l a im. Tp giao thc H323: - Bo hiu RAS: Cung cp cc th tc iu khin tin cuc gi trong mng H323 c GK. - Bo hiu iu khin cuc gi H225. Phng thc hot ng ca H323: - Bo hiu v x l cuc gi. - Thit lp cuc gi. + Giai on 1: Thit lp cuc gi. + Giai on 2: Thit lp knh iu khin. + Giai on 3: Thit lp knh truyn thng o. + Giai on 4: Dch v. + Giai on 5: Kt thc cuc gi. Giao thc SIP: l mt giao thc bo hiu thit lp, duy tr v kt thc cc phin a phng tin. Cc thnh phn trong SIP: - User Agent Client: mt trnh ng dng ca client khi to yu cu phin. - User Agent Server: Mt trnh ng dng server lin lc vi ngi s dng khi nhn c mt yu cu SIP v n p li ng dng theo yu cu ca NSD. Tnh nng ca SIP: 4

2. 3.

4.

5. 6.

7. 8.

9.

10. 11.

12.

13.

14.

- Tch hp cc giao thc c IETF. - n gin v c kh nng m rng. - H tr ti a s di ng ca u cui. - D dng to tnh nng mi cho dch v. Nguyn tc hot ng ca VoIP: Chuyn i tn hiu thoi t in thoi tng t analog sang tn hiu s trc khi truyn qua Internet ri chuyn ngc li bn pha nhn cuc gi. C ch lm vic ca VoIP: - S ha tn hiu analog. - Ly mu. - Lng t ha. - M ha. - Nn ging ni. - Packetting voip. Cc thc truyn thoi trong VoIP: - Kt ni PC-PC: Thng qua mng PSTN. - Kt ni PC-My thoi. - Kt ni My thoi-My thoi. Cc yu t nh hng n cht lng cuc gi VoIP: - Tr trong h thng VoIP. - Jitter. - Mt gi tin. Cc ng dng ca VoIP: - Dch v thoi qua Internet. - Thoi thng minh. - Dch v CallBack Web. - Dch v Fax qua IP. - Call Center. - Dch v tnh cc cuc gi.