可信计算在VPN中的应用

对虚拟专用网VPN进行了研究。VPN使用户远程办公成为可能，但是VPN不能认证主机的配置，入侵者通过有VPN访问权限的主机获得非法的访问权限，使得终端不安全，同时相应的使网络接入也不安全。可以利用可信计算技术解决这些问题，其中可信平台模块通过绑定密钥认证VPN完整性，而可信网络连接认证网络连接安全性，以确保终端、网络接入和通信的安全可信。

Application of trusted computing compliance in VPN

Virtual Private Network (VPN) was studied. VPN enables telecommunication, but it cannot authenticate the configuration of computers. If a computer used for VPN access was compromised, an attack could exploit it to gain unauthorized access and make endpoint insecure. When being connected to the corporate network, the computer becomes a distributor of the untrustworthy endpoint to other computers on the enterprise network. Trusted computing technology can be used to solve these problems.To guarantee the security and trustworthiness of the endpoints, network connection and communication,Trusted Platform Module (TPM) was used to bind keyed attestation to authenticate the integrity of VPN, and Trusted Network Connect (TNC) was used to authenticate the security of network connections.