Trusted Network Connect System with Tri-Element Peer Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Trusted Network Connect (TNC) architecture faces issues with poor extendibility, complex key negotiation, relatively low security, inability to verify AIK certificates, and non-peer-to-peer platform integrity evaluation, which compromise network security.
Innovation Solution
A trusted network connect system with enhanced security is implemented, featuring an Access Requester, Policy Enforcement Point, Access Authorizer, and Policy Manager, utilizing tri-element peer authentication and bidirectional user and platform integrity evaluation, along with centralized AIK certificate authentication and platform integrity verification to simplify key management and enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security defending approaches are used, then implementation is simple, but security effectiveness is insufficient against malicious attacks
Solution Approach 1:
The system segments security evaluation into multiple independent layers: user authentication, platform integrity evaluation, and application-level security checks. Each layer operates independently with dedicated components (PEP, PDP, IMC, IMV), allowing comprehensive security without monolithic complexity
Solution Approach 2:
The patent introduces intermediary components including the Policy Enforcement Point (PEP) that mediates between access requests and network resources, and the Policy Decision Point (PDP) that acts as an intermediary for security policy evaluation, thereby enhancing security effectiveness while managing complexity through specialized intermediary roles
2Adaptability or versatility
If the existing TCG-TNC architecture is used, then network access control is implemented, but key negotiation becomes complex and extendibility is poor
Solution Approach 1:
The patent implements a universal policy enforcement framework where the PEP can enforce multiple types of security policies (integrity, authentication, authorization) through a single unified interface. The PDP serves as a multi-functional decision point that handles various authentication methods and policy types, thereby improving extendibility without proportionally increasing key negotiation complexity
Solution Approach 2:
The patent extracts key management functions into separate dedicated components (PDP for policy decisions, PEP for enforcement) rather than embedding them throughout the system. This extraction allows the core access control mechanism to remain simple while extending functionality through modular additions
3Reliability
If unidirectional integrity evaluation is used, then implementation is straightforward, but security is compromised due to inability to verify AIK certificates and platform integrity
Solution Approach 1:
The patent implements asymmetric verification where the client's platform integrity is verified through AIK certificate validation by the server, while the server's integrity is verified through reverse AIK certificate validation by the client. This asymmetric mutual verification enhances platform integrity assurance without requiring symmetric complexity in the evaluation mechanisms
Solution Approach 2:
The patent incorporates feedback mechanisms where integrity measurement results are continuously monitored and fed back to policy decision points. The IMV (Integrity Measurement Verifier) provides feedback on platform integrity status, enabling dynamic policy adjustments and enhanced verification without requiring complete re-evaluation, thereby managing complexity through iterative feedback
4Reliability
If comprehensive bidirectional authentication is implemented, then security is enhanced, but authentication protocol complexity increases
Solution Approach 1:
The patent performs preliminary platform integrity evaluation and AIK certificate validation during the initial connection phase before full authentication occurs. The IMC (Integrity Measurement Collector) and IMV components conduct preliminary integrity checks, so that when bidirectional authentication is performed, the verification process is streamlined based on pre-established trust relationships, reducing overall protocol complexity
Data Source
AI summary
Disclosed is a trusted network connect system for enhancing the security, the system including an access requester of the system network that connects to a policy enforcement point in the manner of authentication protocol, and network-connects to the access authorizer via a network authorization transport protocol interface, an integrity evaluation interface and an integrity measurement interface, a policy enforcement point network-connects to the access authorizer via a policy enforcement interface, an access authorizer network-connects to the policy manager via a user authentication authorization interface, a platform evaluation authorization interface and the integrity measurement interface, and an access requester network-connects to a policy manager via the integrity measurement interface.