计算机科学 ›› 2012, Vol. 39 ›› Issue (12): 65-69.

• 计算机网络与信息安全 • 上一篇    下一篇

基于可信网络连接的多级涉密网安全接入方案

王 浩,陈泽茂,李 铮,黄碧翼   

  1. (海军工程大学信息安全系 武汉430033)
  • 出版日期:2018-11-16 发布日期:2018-11-16

Secure Access Scheme Based on TNC for Multi-level Classified Network

  • Online:2018-11-16 Published:2018-11-16

摘要: 分析多级涉密网安全接入的需求,提出了基于可信网络连接的多级涉密网安全接入模型。模型通过引入安全属性检查规则,检查接入设备和设备中客体的安全属性,以确保其接入不会造成敏感信息的泄露;通过引入完整性度量规则,实现多级涉密网与接入设备双向完整性度量。在可信网络连接架构的基础上增加认证信息库,提出了一种多级涉密网安全接入架构,设计了对应的安全接入认证协议,协议以先完整性度量后用户认证的顺序实现了接入双方安全可靠的互认证。对比分析表明,该协议的效率比其他接入认证协议的高。

关键词: 多级涉密网,可信网络连接,接入认证,安全属性

Abstract: According to the admission control requirements of multi-level classified network (MLCN),a secure access model based on trusted network connection was proposed. I3y introducing security attribute checking rule, the security attribute of accessing device and its objects were checked in order to ensure that they would not lead to sensitive information leakage. By introducing integrity measurement rule, mutual measurement between the network and the device can be achieved. Based on the access security model, an access system framework for MLCN and an accompanying authentication protocol were put forward. hhe protocol performs integrity measurement before authenticating user authentication to achieve reliable mutual authentication. Comparative analysis indicates that the protocol is relatively more efficient.

Key words: Multi-level classified network,Trusted network connection, Access authentication, Security attribute

No related articles found!
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!