Method and system for hierarchically connecting trusted networks

Abstract

The invention discloses a method and a system for hierarchically connecting trusted networks. The method comprises the following steps: 1) a terminal platform is accessed to a trusted network control domain, and the trusted network management domain transmits a long-term platform identification PIK or AIK certificate to the verified terminal platform; 2) an arbitrary terminal is accessed to a network service domain, and a network connection control point calls platform identification management service and platform completeness management service in the trusted network management domain, and determines whether the terminal can be accessed to the network service domain or not; and 3) the terminal accesses any network service, and the network service determines whether the terminal accessesthe network service or not according to the returned completeness attribute. The system comprises an access terminal domain, the trusted network control domain, the trusted network management domain and the network service domain. By the method and the system, the network service can directly utilize the verification result when the terminal is accessed so as to reduce the network and management load caused by verification; and the access control point can monitor the terminal completeness in real time so as to ensure constant trust in the process.

Description

technical field

[0001] The invention relates to a method and system for trusted network connection, in particular to a method and system for hierarchically connected trusted network. It belongs to the field of information security technology. Background technique

[0002] With the expansion of the scale of the Internet and the deepening of its application, network security and supervision are facing huge challenges. One of the key methods to solve network security problems is to establish a cyberspace trust technology system to realize network identity management, authentication and authorization, and accountability across heterogeneous management domains. Recognition, platform trust. The cyberspace trust system mainly includes two aspects, one is the user identity trust system, and the other is the device platform trust system. With the user identity trust system, the user's behavior and activities on the Internet become manageable and controllable. From the user's login ...

Examples

Embodiment Construction

[0067] The method of the present invention is realized by the following system. Including the network access system on the terminal platform or device, that is, the access terminal domain, the network connection control point in the trusted network control domain, the platform identity management service, platform integrity management service and user identity management service in the trusted network management domain . The network service domain corresponds to the specific network services provided by various network service providers in reality, such as portal websites and email services. see figure 1 , the network access system accesses various network services in the network service domain through the network connection control point of the trusted network control domain, and the trusted network management domain provides platform management services and user identity management for the connection process through the network connection control point Service and Integrit...

technical field

[0001] The invention relates to a method and system for trusted network connection, in particular to a method and system for hierarchically connected trusted network. It belongs to the field of information security technology. Background technique

[0002] With the expansion of the scale of the Internet and the deepening of its application, network security and supervision are facing huge challenges. One of the key methods to solve network security problems is to establish a cyberspace trust technology system to realize network identity management, authentication and authorization, and accountability across heterogeneous management domains. Recognition, platform trust. The cyberspace trust system mainly includes two aspects, one is the user identity trust system, and the other is the device platform trust system. With the user identity trust system, the user's behavior and activities on the Internet become manageable and controllable. From the user's login ...

Examples

Embodiment Construction

[0067] The method of the present invention is realized by the following system. Including the network access system on the terminal platform or device, that is, the access terminal domain, the network connection control point in the trusted network control domain, the platform identity management service, platform integrity management service and user identity management service in the trusted network management domain . The network service domain corresponds to the specific network services provided by various network service providers in reality, such as portal websites and email services. see figure 1 , the network access system accesses various network services in the network service domain through the network connection control point of the trusted network control domain, and the trusted network management domain provides platform management services and user identity management for the connection process through the network connection control point Service and Integrit...

Images