一种新的网络接入控制方法及其认证会话性能分析  

A New Network Access Control Method and Performance Analysis of Authentication Session

作　　者：刘伟[1] 杨林 戴浩[1] 侯滨 

机构地区：[1]解放军理工大学指挥自动化学院,南京210007 [2]中国电子系统设备工程公司,北京100039

出　　处：《计算机学报》2007年第10期1806-1812,共7页Chinese Journal of Computers

基　　金：国家预研基金(513150604)资助.~~

摘　　要：随着网络规模不断膨胀,网络安全问题日益突出,如何构建可信网络已成为当前的研究热点.可信网络的核心技术之一是用户、设备的接入认证及管理.该文分析了网络接入技术的现状,提出了一种新的可信网络接入控制方法,重点对方法中认证会话的失败概率进行了理论分析与模拟仿真,用以指导接入控制设备中软、硬生命期参数的设置,该方法结合了现有的数字证书机制的优点,可以有效提高网络接入的可控可管性.With the constantly expansion of network scale, the problems of network security become more and more intractable. Currently, how to establish trusted network has been a research hotspot. One of the key technology of trusted network is access authentication and management to users and devices. This paper analyses the status quo of trusted network access control technology, puts forward a new method for network access control, the emphases is on the theoretic analyses and simulation on the probability of authentication session failure, so as to direct the parameters setting in the access control device. The new method combines the merits of digital certificate and can effectively promotes the control-ability and manageability of network.

关 键 词：可信网络 认证 网络接入控制 软生命期 硬生命期 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]