Security protection component interconnection structured system and implementation method

Abstract

The invention discloses a structured system for interconnection of security protection components and an implementation method. The scheme is realized through a key distribution module, a trusted measurement module and a trusted transmission module. The key distribution module is used as a trusted authentication base to support host certificate requests and Issue, receive and process the trusted identity verification request; the trusted measurement module is used to receive the trusted measurement request of the security protection component, send the measurement request to the key distribution module, and forward the connection request to the trusted The transmission module terminates the communication after receiving the measurement failure result; the trusted transmission module is used to receive the trusted transmission request from the security protection component, and negotiate keys and exchange keys. The invention guarantees the credibility of communication components through trusted computing technology, and realizes the credibility of component connections through channel integrity protection.

Description

technical field [0001] The invention relates to network security technology, in particular to the interconnection structure technology of security protection components. Background technique [0002] The traditional communication method is to communicate between processes. The connection initiator sends a connection request, and the receiver processes the receiving request. If the connection process is successful, a channel is established for communication. [0003] Taking the three-way handshake connection process of the TCP connection process as an example, the so-called three-way handshake (Three-Way Handshake) is to establish a TCP connection, which means that when establishing a TCP connection, the client and the server need to send a total of 3 packets to confirm the establishment of the connection. In socket programming, this process is triggered by the client executing connect, such as figure 1 As shown, the whole process is as follows: [0004] (1) The first hands...

AI Technical Summary

Problems solved by technology

[0007] There are two security problems in traditional communication methods: 1. The identities of the main body of the communication, Client and Server, may be fraudulently used; 2. The communication process is easy to be intercepted, eavesdropped, or even maliciously tampered with.

Images