A dynamic cross-domain access control system and method based on trusted network connection

Abstract

The invention discloses a system for dynamic cross-domain access control based on trusted network connection. The system comprises a trusted network access requester, a network access decision-maker and a network access controller, wherein the network access decision-maker moves the requester into different safety trusted domains according to the state of the network access requester, so as to achieve dynamic cross-domain access control. The invention further discloses a method for dynamic cross-domain access control based on trusted network connection, and according to the method, platform identity authentication and integrity measurement are carried out by using a domestic TCM chip to rank the network according to safety trusted levels, and the access of the network by a terminal is limited according to the terminal identity authentication and integrity measurement results. According to the invention, dynamic cross-domain access control is set up on the basis of trusted network connection, and the terminal is put in the network domains of different safety levels in a dynamic manner according to the safety trusted status of the terminal in time, so that the safe and trusted access of the network is guaranteed.

Description

technical field [0001] The invention relates to the technical field of trusted networks, in particular to a dynamic cross-domain access control system and method based on trusted network connections. Background technique [0002] With the development of informatization, the problem of malicious software (Malware, such as viruses, worms, etc.) is extremely prominent. The amount of malware is increasing day by day, the number of computers are infected every year, and the problems are increasing every year. Faced with such a severe situation, it is difficult for traditional defense technologies to make major breakthroughs. It is necessary to solve the problem from a different angle, not only to solve the problem of secure transmission and data input checks, but also to start from the source, that is, from each It starts from the terminal connected to the network to curb malicious attacks. [0003] Trusted Network Connection (TNC) is essentially to establish a secure and trust...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is: the current trusted network only performs identity authentication and integrity measurement on the terminal when the terminal accesses the network, and cannot guarantee the security and credibility of the terminal after accessing the network, and does not perform fine-grained After the terminal is connected to the network, it can freely access all resources in the network

Images