层次化可信网络等级划分策略研究

Research on Grade Division Policy in Hiberarchy Trusted Network

提出了一种基于等级划分的层次化可信网络框架,详细说明了可信属性的划分规则和可信等级的评估方法,着重指出了该框架在可信网络中的实际应用。另外,给出了在层次化可信网络中终端的接入过程。仿真实验表明,该框架在保证网络系统安全性和可信性的同时,能够增加终端接入网络的灵活性,并为各厂商可信网络设备的互联、互通和互操作提供支撑。

A framework of hiberarchy trusted network based on the grade division was put forward, and the partition rules of trusted attributes as well as the methods of grade division were explained in detail. Moreover, the potential applications of this framework in trusted network was discussed, and the access procedure of terminals in hiberarchy trusted network was given. Simulations results show that by the proposed framework, not only the safety and reliability of network can be ensured, but also the flexibility of ways to access network is strengthened, and that it can provide support for interoperability of different equipment manufacturers.