TNC在等级保护中的应用研究  

Study on Application of TNC Technology in Classified Protection

作　　者：李国琴 

机构地区：[1]江苏省信息安全测评中心检查认证中心,江苏无锡214073

出　　处：《信息网络安全》2012年第4期89-93,共5页Netinfo Security

摘　　要：信息安全等级保护工作是维护基础信息网络与重要信息系统安全的根本保障,尤其对保护我国政府信息系统的安全具有重要意义。访问控制和身份鉴别在信息系统等级保护的基本技术要求中占有重要地位,针对传统网络接入控制机制的不足,文章提出了基于终端完整性度量的政府远程办公网络系统安全解决方案,设计了一种基于可信网络连接TNC(Trusted Network Connection)的安全接入认证协议。通过安全分析表明,该方案能够确保政府远程办公终端自身的完整性和安全性,从而构建政府远程办公网络系统的可信计算环境,保证整个政府办公网络系统应用环境的安全。Information security classified protection work is fundamental guarantee of the basic information network and key information systems,in particular it＇s important to protect the safety of our government information system.Access control and identity authentication play an important role in the basic technical requirements of information system classified protection.For the deficiencies of traditional access control mechanisms,in this paper a government remote office network system security solution based on endpoint integrity measurement is proposed,an integral security authentication protocol based on TNC（Trusted Network Connection）is designed.Security analysis shows that this program can ensure the security and integrity of government remote office endpoint of its own,so as to construct a trusted computing environment for government remote office network and secure the entire office network system applications.

关 键 词：可信网络连接 终端完整性 访问控制 等级保护 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]