Patent ID: 8336081
Filing Date: 2012-12-18
Classification: H04L

Abstract:
1. A trusted network connect system with enhanced security, comprising an Access Requester AR and a Policy Enforcement Point PEP, wherein the system further comprises an Access Authorizer AA and a Policy Manger PM; the Access Requester AR and the Policy Enforcement Point PEP are networked in an authentication protocol, the Access Requester AR and the Access Authorizer AA are networked via a Network Authorization Transport Protocol Interface IF-T and an integrity evaluation TNC Client-Server Interface IF-TNCCS, both the Access Requester AR and the Access Authorizer AA are provided with Integrity Measurement Interfaces IF-Ms, the Policy Enforcement Point PEP and the Access Authorizer AA are networked via a Policy Enforcement Point Interface IF-PEP, and the Access Authorizer AA and the Policy Manager PM are networked via a User Authentication Authorization Interface IF-UAA and a Platform Evaluation Authorization Interface IF-PEA; wherein the Network Authorization Transport Protocol Interface IF-T is a protocol interface via which bidirectional user authentication and key negotiation between the Access Requester AR and the Access Authorizer AA is performed and mutual access control of the Access Requester AR and the Access Authorizer AA is performed; the integrity evaluation TNC Client-Server Interface IF-TNCCS is a protocol interface via which platform integrity evaluation between the Access Requester AR and the Access Authorizer AA is performed through verifying, by the Policy Manager PM, AIK certificates of the Access Requester AR and the Access Authorizer AA for validity and through verifying, by the Policy Manager PM, platform integrity of the Access Requester AR and the Access Authorizer AA; the Integrity Measurement Interface IF-M is a protocol interface via which platform integrity-related information of the Access Requester AR and the Access Authorizer AA is collected and verified; the Policy Enforcement Point Interface IF-PEP is a protocol interface via which a decision of the Access Authorizer AA is executed; the User Authentication Authorization Interface IF-UAA is a protocol interface via which bidirectional user authentication and key negotiation between the Access Requester AR and the Access Authorizer AA is performed and mutual access control between the Access Requester AR and the Access Authorizer AA is performed; the Platform Evaluation Authorization Interface IF-PEA is a protocol interface via which platform integrity evaluation between the Access Requester AR and the Access Authorizer AA is performed, the Policy Manager PM verify the AIK certificates of the Access Requester AR and the Access Authorizer AA for validity, and the Policy Manager PM verifies platform integrity of the Access Requester AR and the Access Authorizer AA.