Trusted network architecture based on identity

Abstract

A credibility network framework based on identities belongs to the technical field of information security, which comprises three layers and three entities, wherein the three layers are a physical transmission layer, a network layer and an application program layer; and the three entities are a network access sponsor, a network access controller and a safety tactics server. The credibility network framework adopts a vector quantity encryption authentication mechanism based on the identifies of accessors, and guarantees that the requirements of all network accessors are the encryption data streams bound with accessor entities, as long as access controllers use personal identify labels and identify information of access requesting labels to obtain accurate proof test value through decrypting requesting data, bidirectional equipotent identify authentication is realized, then authority and content are evaluated and detected by access control assemblies and safety monitoring assemblies so as to guarantee that all access requirements are safe, and unsafe access requirements are refused, thereby the credibility network framework is realized.

Description

technical field

[0001] The invention belongs to the technical field of information security, and in particular relates to an identity-based credible network connection architecture. Background technique

[0002] At present, the well-known trusted network connection specifications and architectures include TCG-TNC (Trusted Network Connect) of the International Trusted Computing Group (TCG) (Trusted Computing Group). TNC includes an open terminal integrity architecture and a set of technical standards to ensure safe interoperability , the essence of this standard is to establish trusted network connections from trusted terminals. It uses the trusted computing platform module PTM to arm all terminals and hosts, and deploys trusted measurement platforms, security policy platforms, and access control platforms inside trusted networks. , first authenticate the device and identity of the terminal accessing the trusted network, then collect the security status information of the ter...

Images