System and method of network access authentication

Abstract

The example of the invention discloses a process of network switch-in identification, which comprises building up the direct trusting relationship between an acting user side module of an endpoint side unit and an acting server module of a network side unit, building up the direct trusting relationship between an information collection module of the endpoint side unit and an information estimation module of the network side unit, establishing the direct trusting relationship between the information collection module and the acting user side module, and or establishing the direct trusting relationship between the information estimation module and the acting server module. The operation case of the invention further discloses a system of network switch-in identification, which comprises theacting user side module, the information collection module, the acting server module and information estimation module, and is further provided with an acting user side module and an information collection module, and or the direction trusting relationship between the information estimation module and the acting server module. The actions of each noumenon are guaranteed to correspond with the requests of the network terminal estimation system architecture through applying the invention, and the system security can be increased.

Description

technical field [0001] The invention relates to network authentication technology, in particular to a method and system for network access authentication. Background technique [0002] With the rapid development of the Internet in the world and the wide application of the Transmission Control Protocol / Internet Protocol (TCP / IP, Transfer Control Protocol / Internet Protocol) in the network, while the Internet brings convenience to people, its insecurity is also becoming more and more serious. Seriously, due to the open architecture of TCP / IP technology and the security flaws of the protocol itself, most attacks, such as viruses, worms, and hacker attacks, are based on the TCP / IP protocol. Internet security issues mainly include: Security protection of the system and computer network itself; security protection of communication and distributed application systems based on computer networks. [0003] The purpose of the Network Endpoint Assessment (NEA, Network Endpoint Assessmen...

AI Technical Summary

Problems solved by technology

[0012] However, the above-mentioned NEA system only establishes a trust relationship between entities of the same level belonging to the end point side and the network side, that is, between the proxy client module 112 and the proxy server module 122 and between the information collection module 111 and the information evaluation module. A direct trust relationship has been established between the modules 121, but no trust relationship has been established between entities of different levels, such as between the information collection module 111 and the proxy client module 112 and between the information evaluation module 121 and the proxy server module 122. Therefore, the proxy client module 112 may send the system information obtained by the information collection module 111 to the network side without establishing a trust relationship with the information collection module 111, causing the end user to obtain information from the information collection module 111. What information is not known, which reduces the security of the NEA system

Images