Patent ID: 8719897
Filing Date: 2014-05-06
Classification: H04L

Abstract:
1. An access control method for a Tri-element Peer Authentication (TePA) based Trusted Network Connect (TNC) architecture, comprising: 1) performing encapsulation of user authentication protocol data and platform authentication protocol data in the TePA-based TNC architecture: 1.1) encapsulating the user authentication protocol data between an access requestor and an access controller in a Data field of a first group of Tri-element Authentication Extensible Protocol (TAEP) packets, and encapsulating the user authentication protocol data between the access controller and a policy manager in a Data field of a second group of TAEP packets, and exchanging the first group of TAEP packets between the access requestor and the access controller, and exchanging the second group of TAEP packets between the access controller and the policy manager, to perform mutual user authentication between the access requestor and the access controller, and establish a secure channel between the access requestor and the access controller; and 1.2) encapsulating the platform authentication protocol data between the access requestor and the access controller in a Data field of a third group of TAEP packets and encapsulating the platform authentication protocol data between the access controller and the policy manager in a Data field of a fourth group of TAEP packets, and, for the platform authentication protocol data between the access requestor and the access controller, encapsulating a packet of the third group of TAEP packets in a Data field of a packet of a fifth group of TAEP packets to form a nested encapsulation, wherein the third group of TAEP packets of the platform authentication protocol data is protected by the secure channel established according to step 1.1), and the fifth group of TAEP packets are transmitted between the access requestor and the access controller; and for platform authentication protocol data between the access controller and the policy manager, the fourth group of TAEP packets of the platform authentication protocol data being transmitted directly between the access controller and the policy manager.