基于可信计算的网络互联模型

Network interconnection model based on trusted computing

针对传统互联技术难以实现内外网在安全可信情况下互联互通互操作的问题,将可信计算中的相关技术应用到网络互联中,实现内外网在安全隔离情况下的信息交互。研究了网络可信互联框架模型,结合该模型,对基于身份的公钥认证算法进行改进,设计了认证系统与接入者之间的密码协议。分析实体的持续性行为进行并建立评估树模型,对接入者自身的安全状况进行综合可信度评估。最后,通过测试实验对评估方法进行分析与验证,实验结果表明,该评估模型排除时效偏差等不利因素的影响,具有可行性和有效性。

Problem of intranet security is almost birth with network interconnection, especially when the demand for network interconnection is booming throughout the world. The traditional technology can not achieve both security and connectivity well. In view of this, a method was put forward based on trusted computing technology. Basic idea is to build a trusted model about the network interconnection system, and the core part of this model is credible on access to the person＇s identity and conduct verification： first, the IBA algorithm is reformed to design an cryptographic protocol between authentication system and accessors, and the effectiveness is analyzed in two aspects of function and accuracy; second, an evaluation tree model is established through the analysis of the entity sustainable behavior, so the security situation of access terminals can be evaluated. At last, the evaluation method is verified through an experiment.