一种基于EAP的可信网络接入机制

入网终端的可信状态对整个网络的安全具有十分重要的影响,可信计算组织TCG的可信网络连接TNC正是为解决可信接入的问题提出,已成为一个研究热点。基于TNC体系和EAP协议设计了可信网络接入机制。该机制利用接入控制协议交换量化的终端可信度、身份等信息,并根据接入策略确定是否允许终端入网。通过对接入控制协议的健壮性分析,表明该机制能有效实现终端的入网控制,从源头保障网络安全。

An EAP-Based Trusted Network Access Mechanism

The trusted state of endpoints accessible to networks has important effects on the security of the whole network. Trusted network connection proposed by Trusted Computing Group is properly for solving trusted access issues and become a hotspot for a study. A trusted network access mechanism based on TNC architecture and EAP protocol is designed. The mechanism, by using access control protocol, exchanges quantitative trustworthiness information of the endpoint, including the identity information, and then makes sure whether the endpoint could have access to the network in accordance with the access policy. The robustness of the access control protocol is analyzed, and the analysis indicates that the mechanism could realize access control of the endpoint effectively and guarantee the network security from the very origin.