园区网络下的可信网络框架设计与研究

Research and design of the trusted network framework in internal network

由于当前终端接入园区网络,并在园区网络内与其他终端建立通信的模式已无法满足目前的安全要求。文中提出了基于园区网络的可信网络框架设计与研究,设计了一种园区网络的可信网络连接[1]框架的安全接入认证协议,建立可信安全通信通道的验证方法。通过安全分析表明,该方案能够确保终端自身的完整性和安全性,安全可信地接入可信网络,并在可信网络上完成与目标主机之间建立安全可信的通信通道,保证整个园区网络办公环境的安全。

At present,authentication mode of the terminal connected to the internal network,and communication mode of terminals in the internal network have been unable to satisfies current safety requirements. The study on trusted network framework based on the internal network,this paper designs one of security access authentication protocol,establishes the verification method to trust and safety communication channel. The security analysis shows that the scheme can ensure the integrity and security of the own of terminal,ensure safety of trusted network access,establish safe and reliable communication channel between the target host on the trusted network,ensure the safety of the internal network office environment.