一种可信网络模型的构建方法

摘要

The existing isolated, single and add-on network security systems are facing some serious challenges. Based on analysis of the existing research,this paper puts forward a secure trusted network framework based on an integration method of trusted identification and access management of trusted network environment. This framework provides a flexible modeling and digital user authentication description mechanism to support transaction-based privacy protection and personal data acquisition, and a flexible third-party accounta- bility mechanism and end-to-end secure communication. A mobile data service network platform is built based on heterogeneous wireless network environment for effect demonstration and analysis. The experiment results proves the efficiency of the method.%当前孤立、单一和附加的网络安全系统已经不能满足客观需求。在分析已有研究的基础上,提出了通过一种基于集成可信身份识别和访问管理方法的安全可信网络框架。该框架提供了一种灵活建模和描述数字用户身份的机制,支持基于事务的隐私保护和个人数据获取,以及灵活的第三方问责机制与端到端的安全交流,并搭建了基于异构无线网络环境的移动数据服务网络平台,进行效果验证分析,实验结果证明了算法的有效性。