Security protection component interconnection structuralization system and implementation method

Abstract

The invention discloses a security protection component interconnection structuralization system and implementation method. The scheme is implemented by a key distribution module, a trusted measurement module and a trusted transmission module, and the key distribution module serves as a trusted authentication base, supports host certificate request and issuing, and receives and processes a trustedidentity verification request; the trusted measurement module is used for receiving a trusted measurement request of a security protection component, sending the measurement request to the key distribution module, forwarding a connection request to the trusted transmission module if receiving a measurement success result, and terminating the communication if receiving a measurement failure result; and the trusted transmission module is used for receiving a trusted transmission request of the security protection component, and performing key negotiation and key exchange. According to the security protection component interconnection structuralization system and implementation method disclosed by the invention, the credibility of communication components is guaranteed by the trusted computing technology, and the credibility of component connection is achieved through channel integrity protection.

Description

technical field [0001] The invention relates to network security technology, in particular to the interconnection structure technology of security protection components. Background technique [0002] The traditional communication method is to communicate between processes. The connection initiator sends a connection request, and the receiver processes the receiving request. If the connection process is successful, a channel is established for communication. [0003] Taking the three-way handshake connection process of the TCP connection process as an example, the so-called three-way handshake (Three-Way Handshake) is to establish a TCP connection, which means that when establishing a TCP connection, the client and the server need to send a total of 3 packets to confirm the establishment of the connection. In socket programming, this process is triggered by the client executing connect, such as figure 1 As shown, the whole process is as follows: [0004] (1) The first hands...

AI Technical Summary

Problems solved by technology

[0007] There are two security problems in traditional communication methods: 1. The identities of the main body of the communication, Client and Server, may be fraudulently used; 2. The communication process is easy to be intercepted, eavesdropped, or even maliciously tampered with.

Images