A terminal trusted access authentication system and method

Abstract

The invention discloses a terminal credible access authentication system and method. The CA binds the user's public key and identification information and stores them in the electronic certificate, thereby realizing the user's identity authentication; combining data encryption and digital signature technology to ensure Confidentiality, integrity and non-repudiation of user information; the present invention has low requirements on the overall performance of the equipment, which can effectively reduce the cost of network construction; supports multicast services; is compatible with PPP, and has good scalability and adaptability; Ports and uncontrollable ports realize the separation of business and authentication; after the authentication is passed, there is no need to encapsulate data packets, which is highly efficient; different user levels can be mapped to different VLANs to realize the user domain with different permissions Management; it has the advantages of simple implementation, high authentication efficiency, safety and reliability, and easy operation.

Description

Technical field [0001] The invention belongs to the technical field of network security management, relates to a security management and control system, and in particular to a terminal trusted access authentication system and method. Background technique [0002] At present, due to the complexity of the network environment, the diversity of network equipment, the diversity of network terminal access technologies, and the non-compliance of terminal users, the problem of network boundary access security for terminal random access has become increasingly prominent. The network terminal is the entrance to and access to the network, and the dead point of a single terminal is enough to cause the paralysis of the entire network system. The terminal trusted access system is the first and most important line of defense to ensure network security. How to effectively control the secure access of network terminals, build a terminal trusted access authentication control system, and prevent h...

AI Technical Summary

Problems solved by technology

[0002] At present, due to the complexity of the network environment, the diversity of network equipment, the diversity of network terminal access technologies, and the non-compliance of end users, the security issues of network border access, which are randomly accessed by terminals, have become increasingly prominent.

The network terminal is the entrance to access and access the network, and a single terminal bad point is enough to cause the paralysis of the entire network system

Images