Patent ID: 8789134
Filing Date: 2014-07-22
Classification: G06F,H04L

Abstract:
1. A method for a tri-element peer authentication (TePA)-based trusted network connect (TNC) architecture, comprising: configuring an access control mechanism, a network transmission mechanism, and a user authentication protocol using a Trusted Network Transport Interface (IF-TNT) and an Authentication Policy Service Interface (IF-APS); wherein the access control mechanism utilizes a tri-element peer authentication (TePA) protocol between an access requestor (AR), an access controller (AC), and a policy manager (PM); wherein the network transmission mechanism utilizes a Trusted Network Connect (TNC) process that comprises encapsulation of TePA protocols between the AR and the AC and between the AC and the PM; and wherein the user authentication protocol is a TePA protocol executed by the AR, the AC, and the PM so as to achieve user authentication between the AR and the AC, where the PM functions as a trusted third party in the TePA-based authentication protocol; configuring a network connection management mechanism, a platform authentication protocol management mechanism, and a platform authentication protocol using a TNC Client-TNC Access Point Interface (IF-TNCCAP) and an Evaluation Policy Service Interface (IF-EPS); wherein the network connection management mechanism includes participation of a TNC client and a TNC access point in network connection management and does not include participation of an evaluation policy server (EPS) in network connection management; wherein the platform authentication protocol management mechanism includes participation of a TNC client and a TNC access point in platform authentication management; wherein platform authentication between the access requestor and the access controller is achieved by a platform authentication protocol; and wherein the platform authentication protocol is a TePA protocol executed by a TNC client, a TNC access point, and the evaluation policy server so as to achieve platform authentication between the AR and the AC, where the PM functions as a trusted third party; performing an integrity check handshake at an Integrity Measurement Collector Interface (IF-IMC) in the access requestor and an integrity check handshake at the IF-IMC in the access controller according to a first function using the IF-IMC; performing an integrity handshake at an Integrity Measurement Verifier Interface (IF-IMV) in the policy manager according to a second function using the IF-IMV; and using an Integrity Measurement Interface (IF-IMC) for intercommunication between an Integrity Measurement Collector (IMC) and an Integrity Measurement Verifier (IMV) to transport a message, wherein an encapsulation method is used for the message transported between the AR, the AC and the PM.