可信网络接入认证系统设计  

Design of Access Authentication System for Trusted Network

作　　者：杨凌[1] 张蘅[1] 朱云飞[1] 

机构地区：[1]中国电子科技集团公司第二十八研究所,南京210007

出　　处：《指挥信息系统与技术》2013年第3期76-79,共4页Command Information System and Technology

摘　　要：可信网络连接是可信平台应用的扩展,也是可信计算与网络接入控制机制的结合。阐述了基于802.1X协议的可信网络接入认证过程,基于可信计算平台、可信网络连接和访问控制技术实现了一种可信网络接入认证系统设计。该系统根据制定的安全策略,对所有申请接入内网的主机进行身份验证和完整性校验,拒绝了不安全主机接入,从而保障了内网安全。Trusted network connection （TNC） is the application extension of the trusted platform, the combination of trusted compution and network access control mechanism. The access authentication process for the trusted network based on 802.1X protocol is presented. The access authentication system for the trusted network is designed based on the trusted computation platform, the TNC and the access control technology. The system implements the user identity and integrity check requesting to access the protected network. The unsecure access is rejected, thus ensuring the network security.

关 键 词：可信网络连接 802 1X协议 接入认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]