分析了计算机网络协议的安全漏洞 ,介绍了防火墙技术的应用现状 ,并提出了一种新的安全模型。该模型以 CA中心为基础 ,采用数字签名算法 ,CA中心与企业内部网通过秘密通道方式相连 ,企业服务器通过向 CA中心申请数字证书未表明自己的身份 ,从而为企业信息保护提供了一种安全措施 Analyzed the security loopholes in the computer network protocol, introduced the application status of the firewall technology, and proposed a new security model. The model is based on the CA center and adopts a digital signature algorithm. The CA center is connected with the intranet through a secret channel. The enterprise server provides a security for the enterprise information protection by applying for a digital certificate from the CA center without indicating its own identity Measures