基于等级划分的可信接入和修复模型研究  

Research on Trusted Access and Remediation Model Based on Grade Division

作　　者：李宾[1] 王健[2,3] 王爱民[2,3] 吴静[2,3] 

机构地区：[1]吉林大学数学学院,吉林长春130012 [2]吉林大学计算机科学与技术学院,吉林长春130012 [3]吉林大学符号计算与知识工程教育部重点实验室,吉林长春130012

出　　处：《数学的实践与认识》2010年第17期84-99,共16页Mathematics in Practice and Theory

基　　金：国家自然科学基金(60973136;61073164);科技部国际科技合作交流专项项目(2008DFA12140);欧盟合作项目(I55776-EM-1-2009-1-IT-ERAMUNDUS-ECW-LI2)

摘　　要：提出了一种基于等级划分的层次化可信接入框架和修复模型,详细说明了可信属性的划分规则和等级的评估方法以及修复模型的工作流程,着重阐明了基于该框架的实际应用和终端接入过程.仿真实验结果表明,框架在保证网络系统安全性和可信性的同时,能够增加终端接入网络的灵活性,并为各厂商可信网络设备的互联、互通和互操作提供支撑,而且修复模型部署简单,为不满足本地安全策略的终端提供方便可靠的修复服务.A framework of hiberarchy trusted access and remediation model based on the grade division were put forward,and the partition rules of trusted attributes,the methods of grade division as well as the work flow of remediation model were explained in detail.Moreover, the potential applications and the access procedure of terminals were discussed.Simulations results show that by the proposed framework,not only the safety and reliability of network can be ensured,but also the flexibility of ways to access network is strengthened,and that it can provide support for interoperability of different equipment manufacturers.It also can be concluded that the remediation model is easy to deploy and by which the convenient and reliable remediation services are able to be provided to those terminals who fail to meet the security policy.

关 键 词：可信网络 接入控制 认证 可信属性 修复网络 

分 类 号：O242.1[理学—计算数学]