Trusted network architecture based on identity

Abstract

A credibility network framework based on identities belongs to the technical field of information security, which comprises three layers and three entities, wherein the three layers are a physical transmission layer, a network layer and an application program layer; and the three entities are a network access sponsor, a network access controller and a safety tactics server. The credibility network framework adopts a vector quantity encryption authentication mechanism based on the identifies of accessors, and guarantees that the requirements of all network accessors are the encryption data streams bound with accessor entities, as long as access controllers use personal identify labels and identify information of access requesting labels to obtain accurate proof test value through decrypting requesting data, bidirectional equipotent identify authentication is realized, then authority and content are evaluated and detected by access control assemblies and safety monitoring assemblies so as to guarantee that all access requirements are safe, and unsafe access requirements are refused, thereby the credibility network framework is realized.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to an identity-based credible network connection architecture. Background technique [0002] At present, the well-known trusted network connection specifications and architectures include TCG-TNC (Trusted Network Connect) of the International Trusted Computing Group (TCG) (Trusted Computing Group). TNC includes an open terminal integrity architecture and a set of technical standards to ensure safe interoperability , the essence of this standard is to establish trusted network connections from trusted terminals. It uses the trusted computing platform module PTM to arm all terminals and hosts, and deploys trusted measurement platforms, security policy platforms, and access control platforms inside trusted networks. , first authenticate the device and identity of the terminal accessing the trusted network, then collect the security status information of the ter...

AI Technical Summary

Problems solved by technology

Then in the Internet, how to evaluate the security of the terminal, how to collect the security status information of the terminal, who will collect it, and who will formulate the security policy are all difficult to implement; Security information is a relatively sensitive issue that involves personal privacy issues. Furthermore, even if users do not care about privacy issues, and trusted terminals rely on PTM modules, all internal information is encrypted. Only the reporting system is adopted for safety information, so how reliable is this reporting system, and how does the measurement platform confirm that the information is not false? Third, the trusted network architecture and technical specifications still use the existing basic technology without any innovation or breakthrough. This is the fundamental reason why no decent product has entered the market since the introduction of the TNC architecture

Images