A working method of trusted network and trusted network

Abstract

The invention discloses a trusted network which comprises a trusted application, a trusted tag, a trusted agent, a trusted management platform and a trusted router. An active offensive method is adopted by the trusted network so that safety certification can be conducted on source terminals (such as identity, application programs and procedures) of the network and safe tagging can be conducted according to a set rule. A trusted network device and a tagging management platform are combined so that safety admittance of a user terminal according to role authority can be achieved, and therefore network layer authority is achieved; according to the class of services and the service authority, a safety access route is proposed, so that an object and a subject only and logically exist in the network, and therefore data are prevented from being stolen and tampered. Through management platform tagging and CIPSO message control, the shortage of a traditional safety protection means is offset, integrated linkage safety protection is conducted on the network according to the aspects of data transmission, a network perimeter and a master terminal, and the requirement for network grade protection is satisfied in the true sense.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a trusted network architecture and a working method of the trusted network. Background technique [0002] Most of the commonly used security methods in existing networks are passive defenses to eliminate existing problems in the network; with the complexity of network structure and the diversification of network equipment, security management efficiency and capabilities have become the bottleneck of network security development. [0003] Traditional networks have the following problems: [0004] 1. There are many devices, the network structure is becoming more and more complex, and the management difficulty is increasing; [0005] 2. The internal devices of the network cannot work together; [0006] 3. The security incidents reported by network security equipment are inaccurate, prone to misreporting and omission, and cannot be handled in a timely manner; [0007] 4. ...

AI Technical Summary

Problems solved by technology

[0004] 1. There are many devices, the network structure is becoming more and more complex, and the management difficulty is increasing;

[0005] 2. The internal devices of the network cannot work together;

[0006] 3. The security incidents reported by network security equipment are inaccurate, prone to misreporting and omission, and cannot be handled in a timely manner;

Images