基于可信网络连接的多级涉密网安全接入方案  

Secure Access Scheme Based on TNC for Multi-level Classified Network

作　　者：王浩[1] 陈泽茂[1] 李铮[1] 黄碧翼[1] 

机构地区：[1]海军工程大学信息安全系,武汉430033

出　　处：《计算机科学》2012年第12期65-69,共5页Computer Science

基　　金：中国博士后特别基金项目(201003757)资助

摘　　要：分析多级涉密网安全接入的需求,提出了基于可信网络连接的多级涉密网安全接入模型。模型通过引入安全属性检查规则,检查接入设备和设备中客体的安全属性,以确保其接入不会造成敏感信息的泄露;通过引入完整性度量规则,实现多级涉密网与接入设备双向完整性度量。在可信网络连接架构的基础上增加认证信息库,提出了一种多级涉密网安全接入架构,设计了对应的安全接入认证协议,协议以先完整性度量后用户认证的顺序实现了接入双方安全可靠的互认证。对比分析表明,该协议的效率比其他接入认证协议的高。According to the admission control requirements of multi-level classified network（MLCN）,a secure access model based on trusted network connection was proposed.By introducing security attribute checking rule,the security attribute of accessing device and its objects were checked in order to ensure that they would not lead to sensitive information leakage.By introducing integrity measurement rule,mutual measurement between the network and the device can be achieved.Based on the access security model,an access system framework for MLCN and an accompanying authentication protocol were put forward.The protocol performs integrity measurement before authenticating user authentication to achieve reliable mutual authentication.Comparative analysis indicates that the protocol is relatively more efficient.

关 键 词：多级涉密网 可信网络连接 接入认证 安全属性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]