摘要
入网终端的可信状态对整个网络的安全具有十分重要的影响,可信计算组织TCG的可信网络连接TNC正是为解决可信接入的问题提出,已成为一个研究热点。基于TNC体系和EAP协议设计了可信网络接入机制。该机制利用接入控制协议交换量化的终端可信度、身份等信息,并根据接入策略确定是否允许终端入网。通过对接入控制协议的健壮性分析,表明该机制能有效实现终端的入网控制,从源头保障网络安全。
The trusted state of endpoints accessible to networks has important effects on the security of the whole network. Trusted network connection proposed by Trusted Computing Group is properly for solving trusted access issues and become a hotspot for a study. A trusted network access mechanism based on TNC architecture and EAP protocol is designed. The mechanism, by using access control protocol, exchanges quantitative trustworthiness information of the endpoint, including the identity information, and then makes sure whether the endpoint could have access to the network in accordance with the access policy. The robustness of the access control protocol is analyzed, and the analysis indicates that the mechanism could realize access control of the endpoint effectively and guarantee the network security from the very origin.
出处
《通信技术》
2009年第12期109-111,114,共4页
Communications Technology
关键词
可信网络连接
可信度
接入控制协议
trusted network connect
trustworthiness
access control protocol
