TNC可信网络架构与元数据存取点研究  

Research of TNC architecture and MAP

作　　者：吕润瓅[1] 郝福珍[1] 

机构地区：[1]华北计算技术研究所,北京100083

出　　处：《计算机工程与设计》2010年第2期243-248,共6页Computer Engineering and Design

摘　　要：为了弥补以网络接入控制为基础的可信网络技术存在着灵活性差、事后控制力弱的缺陷,研究了新一代的TNC可信网络架构。通过在原有的TNC架构上加入元数据存取点(metadata access point,MAP)实体,建立了复合结构的元数据存储模型,定义了以XML为数据类型,SOAP为底层的元数据通信协议,更新了原有体系结构中的终端准入策略,优化了元数据搜索算法,实现了可信网络安全体系与传统安全机制的结合,进一步保障了网络安全。To increase the flexibility and strengthen the post-event control of trusted network technology which based on network access control, the new version of TNC architecture is researched. A new entity named metadata access point is added into previous TNC archi- tecture. The heterarchical data model ofmetadata is created. The communication protocol expressed in XML and based on SOAP is defined. The policy ofendpoint access in previous architecture is refreshed. The algorithm ofmetadata searching is optimized. The whole structure combined the trusted network security system and the traditional security technology and a more secure network is provided.

关 键 词：可信网络连接 信息安全 元数据存取点 数据模型 搜索算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]