基于Agent的认证与网络访问控制系统  

Agent-Based Authentication and Network Access Control System

作　　者：周剑岚[1] 宋四新[2] 刘先荣[2] 

机构地区：[1]华中科技大学控制科学与工程系,湖北武汉430074 [2]中国长江三峡工程开发总公司,湖北宜昌443002

出　　处：《微电子学与计算机》2008年第7期152-156,共5页Microelectronics & Computer

基　　金：国家自然科学基金项目(60174039);部委预研基金项目

摘　　要：身份认证与网络访问控制验证用户的合法身份,授权网络资源的访问.针对目前相关系统的缺陷,设计并实现了基于Agent技术的多因素认证与粗、细粒度网络访问控制系统.通过分析和设计Agent软件的通信安全性、认证和访问控制的关键环节和流程,结合硬件特征属性密钥和用户信息,实现多因素认证,并根据网络服务资源的敏感和保密程度,划分不同密级的用户.以Windows XP为例,具体论述Agent软件利用HOOK技术实现以上关键功能.实验结果表明,该系统效率高,可扩展性、通用性好.Authentication and network access control system verifies user＇s legal identity and authorizes network resources access. To aim at the shortcomings of the related systems, this paper designs and implements an agent-based multi-factor authentication and coarse, fine-grained network access control system. This paper implements the multi-factor authentication by analyzing and designing the secure communication process, the authentication and access control working flow, as well as the linkage of hardware characteristics and user properties. This paper distinguishes different user levels according to the network service resources secrecy, and demonstrates the realization of above functions with HOOK technology. The results obtained from experiments show that the system is high efficiency, scalable and open.

关 键 词：身份认证 网络访问控制 智能体 认证与授权机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]