Method for implementing computer terminal safety admittance based on credible authentication gateway

Abstract

The invention discloses a method for realizing the safety admittance of a computer terminal based on a trusted authentication gateway, and belongs to the security technology field of the computer. The method comprises the following procedures: (1) the computer terminal initiates an access request to the gateway; (2) the basic identity information of the computer terminal is registered to the gateway; (3) an active label of the computer terminal is formed by the gateway; (4) the identity and the authority of the active label are verified through the trusted authentication gateway; (5) the trusted authentication gateway judges whether the identity and the authority of the active label are legal or not; (5.1), when the identity and the authority of the active label are illegal, the access of the computer terminal is barred; (5.2), when the identity and the authority of the active label are legal, the access of the computer terminal is permitted. The method has the advantages: firstly, the uniqueness and the identifiability of the identity of the computer terminal to the network are realized; secondly, the possibility that the terminal identification is falsified illegally can be avoided, and the terminal identification can not be forged.

Description

technical field [0001] The invention relates to a method for realizing security access of a computer terminal based on a trusted authentication gateway, which belongs to the technical field of computer security. Background technique [0002] With the development of computer networks, the TCP / IP protocol is widely used by the Internet, and the use of MAC and IP to identify terminals between two communication platforms using the TCP / IP protocol is not credible, because MAC and IP can be changed at will, that is, computer The identity of the terminal in the network can be forged. Therefore, communication entities cannot verify the real identity of the other party during communication, that is, they cannot verify whether the other party is trustworthy. Contents of the invention [0003] The purpose of the present invention is to overcome the shortcomings of the prior art, provide a method for realizing secure access of computer terminals based on a trusted authentication gatew...

AI Technical Summary

Problems solved by technology

[0002] With the development of computer networks, the TCP / IP protocol is widely used by the Internet, and the use of MAC and IP to identify terminals between two communication platforms using the TCP / IP protocol is not credible, because MAC and IP can be changed at will, that is, computer The identity of the terminal in the network can be forged. Therefore, the communication entities cannot verify the real identity of the other party when communicating, that is, they cannot verify whether the other party is trustworthy.

Images