基于可信计算平台的统一认证系统模型  

Model of Uniform Authentication System Based on Trusted Computing Platform

作　　者：李福林[1] 李立新[1] 周雁舟[1] 徐宁[1] 

机构地区：[1]信息工程大学电子技术学院,河南郑州450004

出　　处：《武汉大学学报（理学版）》2009年第1期49-52,共4页Journal of Wuhan University:Natural Science Edition

基　　金：国家高技术研究发展计划(863)项目(2008AA01Z404)

摘　　要：将数字证书技术、认证代理技术和可信计算技术相结合,针对园区网环境,提出了一种基于可信计算平台的统一认证系统模型,该模型通过在计算终端引入可信平台模块、对用户身份统一认证、对计算平台进行身份及完整性验证等方法,解决了存在多个应用系统时口令容易混淆、访问效率低下和终端的可信性难以保证的问题.系统的安全性分析和测试结果表明,用户只需一次认证,即可访问其拥有权限的多个应用系统,效率和安全性得到了很大的提升,而且可以保证终端的可信性.A model of uniform authentication system based on digital certificate,authentication proxy and trusted computing platform in the Intranet environment is proposed in this paper.Problems of mixed password,pure efficiency and the trustworthiness of endpoints are resolved through methods of adding trusted computing platform at the endpoints,user uniform identity authentication,platform identity verification and integrity verification,etc.Analysis for the security and experimental results shows that Intranet users may access all the authorized network services without necessarily re-authentication,which greatly enhances the efficiency and security of this system.At the same time,it can assure the trustworthiness of endpoints.

关 键 词：公钥基础设施 数字证书 可信计算 可信计算平台 统一认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]