Method and system for hierarchically connecting trusted networks

Abstract

The invention discloses a method and a system for hierarchically connecting trusted networks. The method comprises the following steps: 1) a terminal platform is accessed to a trusted network control domain, and the trusted network management domain transmits a long-term platform identification PIK or AIK certificate to the verified terminal platform; 2) an arbitrary terminal is accessed to a network service domain, and a network connection control point calls platform identification management service and platform completeness management service in the trusted network management domain, and determines whether the terminal can be accessed to the network service domain or not; and 3) the terminal accesses any network service, and the network service determines whether the terminal accessesthe network service or not according to the returned completeness attribute. The system comprises an access terminal domain, the trusted network control domain, the trusted network management domain and the network service domain. By the method and the system, the network service can directly utilize the verification result when the terminal is accessed so as to reduce the network and management load caused by verification; and the access control point can monitor the terminal completeness in real time so as to ensure constant trust in the process.

Description

technical field [0001] The invention relates to a method and system for trusted network connection, in particular to a method and system for hierarchically connected trusted network. It belongs to the field of information security technology. Background technique [0002] With the expansion of the scale of the Internet and the deepening of its application, network security and supervision are facing huge challenges. One of the key methods to solve network security problems is to establish a cyberspace trust technology system to realize network identity management, authentication and authorization, and accountability across heterogeneous management domains. Recognition, platform trust. The cyberspace trust system mainly includes two aspects, one is the user identity trust system, and the other is the device platform trust system. With the user identity trust system, the user's behavior and activities on the Internet become manageable and controllable. From the user's login ...

AI Technical Summary

Problems solved by technology

[0007] 2. Software upgrades may lead to network security risks

In existing schemes, the verification of integrity is performed by the IMV component inside the server. However, this component is usually implemented as a shared library file released by the software manufacturer, which may lead to unsafe terminals due to the server not updating the IMV component in time. Access to the network brings problems such as the spread of malicious code and the leakage of sensitive information

Images