一种新的可信网络接入架构ETNA  

Novel Trusted Network Access Architecture ETNA

作　　者：秦晰[1] 常朝稳[1] 鹤荣育[1] 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450004

出　　处：《小型微型计算机系统》2011年第8期1493-1498,共6页Journal of Chinese Computer Systems

基　　金：国家"八六三"高技术研究发展计划项目(2007AA01Z479)资助

摘　　要：提出一种基于嵌入式可信终端的可信网络接入架构,为网络安全接入提供新的思路和手段.该架构能够通过嵌入式系统为接入终端构建可信计算平台,通过双向身份鉴别协议实现接入双方的身份鉴别,通过双向非对等评估协议实现双方计算平台环境鉴别与评估.和现有网络接入架构相比,增强了接入的安全性,部署灵活,实用性强.A novel trusted network access architecture is proposed which provides new methods on the security of network access.The trusted access terminal in the architecture based on embedded system constructs trusted computing platform.The trusted terminal and access gateway authenticate each other′s identity through authentication protocol and authenticate each other′s platform through non-peer estimation protocol.Contrasted with existing network access architectures,it enhances the security of access and has the advantage of flexible deploying and convenience usage.

关 键 词：可信网络接入 可信终端 TPM 嵌入式系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]