A high-concurrency policy decision-making system, trusted network system and access method
A strategy decision-making and network system technology, applied in the field of high-concurrency strategy decision-making system, can solve problems such as system delay and achieve the effect of improving efficiency
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0046]A high-concurrency policy decision-making system of the present invention includes an authentication server and a task scheduling server. There are multiple types of authentication servers corresponding to different types of authentication processes, which can realize user identity authentication and platform integrity authentication. The kernel layer of the task scheduling server is configured with a network card driver module and a netfilter module, and the application layer of the task scheduling server is configured with a user space process. The netfilter module is respectively connected to the above-mentioned various authentication servers, and is used to forward the access authentication request of AR according to the type of authentication process To the corresponding authentication server, the user space process is connected to the netfilter module through the netlink interface to receive the access authentication request, record the AR corresponding to the authen...
Embodiment 2
[0052] A highly concurrent trusted network architecture system of the present invention includes AR, PEP and PDP.
[0053] There are multiple ARs, and the ARs run on the access endpoint device to obtain the security status information of the access endpoint device and submit an access authentication request. Wherein, the security state information is the integrity information collected by the integrity collector IMC (Integrity Measurement Collectors) configured on the access terminal device.
[0054] That is, an integrity collector and multiple ARs are configured on the access endpoint device, and the client collects information through the integrity collector IMC (Integrity Measurement Collectors), and then sends it to the server through the AR module.
[0055] The PEP is connected to the above-mentioned multiple ARs through a switch to receive security status information and access authentication requests, and the relevant port of the switch is configured with 802.1X protoco...
Embodiment 3
[0065] A high-concurrency trusted network access method of the present invention constructs a high-concurrency trusted network system disclosed in Embodiment 1 as a PDP, forwards the AR access authentication request to a corresponding type of authentication server through the PDP, and Summarize the authentication results of various authentication servers to generate a trusted network decision, and judge whether the AR is connected to the trusted network based on the trusted network decision through PEP.
[0066] The workflow of this method is:
[0067] S100. Receive the access authentication request of the AR through the netfilter module, and determine the authentication process type of the access authentication request;
[0068] S200. According to the authentication process type of the access authentication request, forward the access authentication request to the corresponding authentication server through the netfilter module;
[0069] Based on the netlink mechanism, the a...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More