基于签密的多级安全网络接入认证协议

A Sign Crypt-based Access Authentication Protocol for Multi-level Security Network

为增强多级安全网络(Multi-Level Security Network,MLSN)接入认证的性能和安全性,提出了一种新的接入认证协议。它对可信网络连接(Trusted Network Connection)进行增强,实现了双向的平台可信性评估;通过引入了安全属性检查组件,对平台接入中的失泄密隐患进行分析,进一步增强了MLSN接入的安全性;采用签密技术,减少了ML-SN接入认证过程中的公钥运算次数和消息交互轮数。通过对协议的比较和形式化分析,结果表明,所提出协议的计算和通信开销较小、安全性较高。

To improve both periormance ano secui,ty integrity measurement feature that Trusted Net- SN）, a new access authentication protocol is proposed. It enhances the work Connect（TNC） provides by implementing bidirectional platform integrity evaluations. Is introduces a security at tribute checking component to analyze potential sensitive information leakage, thus further improves the access security in MLSN. By employing sign-crypto, it reduces the public key computation overhead and the number of messages exchanged during access authentication＂ Security of the protocol is formally analyzed. Comparisons with similar protocols show that the protocol incurs less performance overhead in both computation and communication.