基于国产管理平台的安全可信网络连接系统  

Safe and Trusted Network Connection Architecture Based on Localized Management Platform

作　　者：鲍敬源 徐明迪[2] BAO Jingyuan;XU Mingdi(The Second Military Representative Office of Naval Equipment Department in Wuhan,Wuhan 430000;Wuhan Digital Engineering Institute,Wuhan 430205)

机构地区：[1]海装驻武汉地区第二军事代表室,武汉430000 [2]武汉数字工程研究所,武汉430205

出　　处：《计算机与数字工程》2023年第7期1603-1610,共8页Computer & Digital Engineering

摘　　要：随着网络化体系作战系统的发展,信息安全在舰船网络建设中日益重要。可信网络连接系统可部署在舰船一体化网络中,能够为舰船信息网络内设备及通信一体化提供安全防护。论文提出了一种基于国产管理平台的安全可信网络连接架构,通过可信芯片TCM和完整性度量模块对终端状态进行验证,实现可信功能并提供可信状态报告;通过第三方安全管理中心和可信认证策略实现可信域内终端身份识别和可信状态判定,保证可信域内的各终端安全可信和通信双方的安全可靠连接,使整个平台具备主动免疫防护能力,能够对安全威胁进行有效防御。With the development of networked system combat systems,information security is becoming increasingly impor-tant in the construction of naval networks.A trusted network connection system can be deployed in the ship's integrated network,which can provide security protection for the integration of equipment and communication within the ship's information network.This paper proposes a secure and trustworthy network connection architecture based on a home-made management platform,which veri-fies the terminal status through a trustworthy chip TCM and integrity metric module,realizes trustworthy functions and provides trustworthy status reports.Terminal identification and trustworthy status determination within the trustworthy domain are realized through a third-party security management center and a trustworthy authentication policy.It ensures the security of each terminal in the trusted domain and the safe and reliable connection of the communication parties,so that the entire platform has the active im-mune protection capability and can effectively defend against security threats.

关 键 词：舰船网络安全 可信网络连接 主动免疫 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]