摘要
可信网络连接TNC是一种有效解决网络内部安全威胁的技术,但现有TNC方案还存在不能保证接入网络的可信性、无法防止假冒IMC度量信息攻击等问题。针对这些问题,提出采用双向认证的方法,对接入双方进行认证,以保证可信网络连接和访问。另一方面,采用增强型的IMC,来保证度量信息来源于真实的终端。通过对比分析发现,改进后的TNC方案在安全方面具有较为明显的增强,能够同时保证接入终端和访问网络的真实可信,有效提高了基于TNC的系统安全防护能力。
Trusted network connection TNC is an effective solution to the security threats within the network, and via Through authentication and integrity measurement of the terminal, ensures the that the terminal access to the network resource is credible, thus to achieve reliable access to the network. However, the existing TNC scheme still can not guarantee credibility of the access network and prevent the counterfeit IMC measurement and information attack. Aiming at these problems, the modified TNC scheme based on bidirectional authentication and enhanced IMC is proposed. Comparative analysis indicates that the modified TNC scheme has more obvious security superiority, could ensure authenticity of both the access terminal and the access network, and effectively improve the security protection capability of the TNC-based system.
出处
《通信技术》
2017年第8期1776-1783,共8页
Communications Technology
关键词
可信计算
可信网络连接
完整性度量
双向认证
trusted computing
trusted network connection
integrity measurement
bidirectional authentication
