该文提出了一种CIMS网络安全体系结构及设置“安全子层”的设计思想。介绍了基于该安全体系结构的5个层次的安全保障：用户安全、应用安全、端-端安全、子网安全和链路安全。限于安全防护的开销，实用的CIMS网络系统根据安全需求，可选择其中某些层次的若干安全服务选项。已经在实验网络上实现了有关的安全机制，提供了相应的安全服务。 This paper proposes a CIMS network security architecture and the design of “security sublayer”. Five levels of security based on this security architecture are introduced: user security, application security, end-to-end security, subnet security, and link security. Limited to the cost of security, a practical CIMS network system can choose among several levels of several security service options based on security needs. The relevant security mechanisms have been implemented on the experimental network and the corresponding security services have been provided.