A trusted network connection method based on three-element peer authentication

Abstract

The invention provides a trusted network connection method based on ternary equal authentication, which pre-prepares a platform integrality information, prepares an integrality authentication request. A network access requester sends a access request to a network access controller, the network access controller starts a two-way authentication process of users, and user authentication service unit performs an equal authentication protocol. After the two-way user authentication is success, a TNC client-side, a TNC service side and a platform evaluate service unit execute a platform integrality evaluate by using the ternary equal authentication method. The network access requester and network access controller achieve an inter access control between the access requester and a access controller based on a recommended control terminal received respectively. The invention solves the technical problems in background technology that expandability is poor, the key arrangement process is complex, and the security is low and the platform integrality evaluate is unequal. The invention simplifies the key management and integrality authentication mechanism of trusted network connection, expands the range of applicability of trusted network connection.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a trusted network connection method based on ternary peer-to-peer authentication. Background technique [0002] With the development of informatization, the problems of malicious software such as viruses and worms are extremely prominent. There have been more than 35,000 kinds of malicious software, and more than 40 million computers are infected every year. To contain such attacks, it is necessary not only to solve the problem of secure transmission and data input checks, but also to start defense from the source, that is, from every terminal connected to the network. However, traditional security defense technologies have been unable to defend against a wide variety of malicious attacks. [0003] In response to this problem, the International Trusted Computing Organization TCG has specially formulated a network connection specification based on trusted co...

AI Technical Summary

Problems solved by technology

[0019] The purpose of the present invention is to provide a trusted network connection method based on ternary peer-to-peer authentication, which solves the problem of poor scalability, complex key negotiation process, relatively low security, and the possibility that the access requester cannot verify the AIK in the background technology. Technical issue of unequal assessment of certificate validity and platform integrity

Images