Abstract In this paper,the solutions to the security issues of Internet/Intranet environment are proposed.And authentication and key distribution protocols are presented,which can be incorporated into the OSI (Open System Interconnection) architecture.The protocol adopt modified Kerberos authentication protocol at the lower sublayer, and design authenticated key exchange protocols using symmetric or asymmetric cryptosystem at the upper sublayer for different solutions.The protocols can be used for remote access applications,thus it is benefit to security manage of Intranet.