System and method for authenticating terminal trusted access

Abstract

The invention discloses a system and a method for authenticating terminal trusted access. According to the invention, a public key and identification information of a user are bound and stored in an electronic certificate through a CA, and identity authentication of the user is realized; and the confidentiality, the integrity and the non-repudiation of user information are ensured by being combined with data encryption and digital signature technologies. The system disclosed by the invention is low in requirement for the overall performance of equipment, can effectively reduce the networking cost, supports multicast services, is compatible with a PPP (point-to-point protocol), good in expansibility and adaptability, designed with a controllable port and an uncontrollable port, and realizes separation of services and authentication. The system does not need to carry out packaging processing on a data packet after passing authentication, is high in efficiency, can map different user levels to different VLANs (virtual local area networks), realizes management for user domains with different authorities, and has the advantages of simple implementation mode, high authentication efficiency, safety, reliability and easy operation.

Description

technical field [0001] The invention belongs to the technical field of network security management, relates to a security management and control system, and in particular to a terminal trusted access authentication system and method. Background technique [0002] At present, due to the complexity of the network environment, the diversity of network devices, the diversity of network terminal access technologies, and the non-compliance of end users, the security issues of network border access, which are randomly accessed by terminals, have become increasingly prominent. The network terminal is the entrance to access and access the network, and a single terminal failure is enough to cause the paralysis of the entire network system. The terminal trusted access system is the first and most important line of defense to ensure network security. How to effectively control the secure access of network terminals, build a terminal trusted access authentication control system, and pre...

AI Technical Summary

Problems solved by technology

[0002] At present, due to the complexity of the network environment, the diversity of network equipment, the diversity of network terminal access technologies, and the non-compliance of end users, the security issues of network border access, which are randomly accessed by terminals, have become increasingly prominent.

The network terminal is the entrance to access and access the network, and a single terminal bad point is enough to cause the paralysis of the entire network system

Images