Architecture accessing trusted network for tolerating untrusted components and access method thereof

Abstract

The invention relates to a network connection method, in particular to architecture for trusted network connection of a terminal with TPM function and a computer network, and an access method thereof. The architecture consists of five parts, namely a trusted terminal for tolerating untrusted components, a trusted access gateway, an authentication policy management server, a component information collecting and publishing node MAP and a secure data exchange platform; an embedded trusted system layer additionally arranged in the trusted terminal is an independent and integral system on chip SOC, and is not influenced or controlled by an upper-layer operating system, so that the architecture has better realizability; the trusted access gateway and the trusted terminal adopt bidirectional nonequivalent trusted evaluation; and a data exchange platform is arranged additionally between the trusted terminal and the trusted access gateway, and can only realize data exchange with uniform format and transparent structure at raw data level so as to prevent protocol defect-based attacks; therefore, the invention provides a higher security protection mechanism for protecting the network.

Description

Technical field: [0001] The present invention relates to a network connection method, in particular to a trusted network access architecture and access method for a terminal with a TPM function and a computer network that can tolerate untrusted components. Background technique: [0002] Such as figure 1 As shown, the Trusted Network Connect (TNC) is formulated by the TCG organization to ensure the trusted network connection between a terminal with a TPM and a computer network. Trusted network connection collects and verifies the integrity information of the requester through the network access request, evaluates the information according to certain security policies, and decides whether to allow the requester to connect to the network, thereby ensuring the credibility of the network connection. The TNC architecture ensures that the information sent from the terminal to the server is credible, so there is no possibility of the attacked terminal providing false information. ...

AI Technical Summary

Problems solved by technology

[0021] However, the TNC specified by the TCG only focuses on the integrity verification of the access terminal, and does not consider the security issues when the policy enforcement point is attacked or destroyed. For this reason, China Trusted Alliance proposes an access control method based on ternary peer-to-peer authentication, which strengthens the integrity protection of policy enforcement points, but its protocol is too complicated

On the other hand, the integrity reference value of each component of the TNC platform is the benchmark value of credible measurement. After the upgrade and revision of each component, it cannot be quickly deployed, which seriously restricts the application of TNC.

Images