可信网络连接安全协议与访问控制体系设计

摘要

针对现阶段可信网络在连接与控制方面存在问题，分析现有可信网络实体功能、结构层次和接口协议，提出包含完整度量收集器在内的全新可信网络连接体系架构，重新设计以 EAP⁃TNC 数据包为核心的安全网络协议及访问控制体系。通过设置网络带宽、终端状态和可信等级等多项指标，对体系访问控制和连接性能进行实验测试。结论表明，可信网络连接安全协议和访问控制体系可使终端以安全可控的方式访问网络，具备良好的安全性和可用性。%In order to solve the connection and control problems of trusted network,the entity function,architecture and interface protocol of trusted network are analyzed,a new trusted network connection architecture,including the integrity measurement collector,is proposed,the security network protocol and access control architecture based on EAP⁃TNC data packet are designed.By setting specifi⁃cations such as network bandwidth,terminal state and reliability level,the performance of the basic connection and access control is test⁃ed.The result shows that based on the connection security protocol and access control architecture of trusted network, the terminal equipment can access the network in a secure and controllable way,and the security and availability are improved.