Patent ID: 8037306
Filing Date: 2011-10-11
Classification: H04L

Abstract:
1. A method for realizing network access authentication, wherein a network access authentication device pre-storing a system integrity value of a device waiting to access which is calculated by the device waiting to access itself, and a correspondence between each device waiting to access and its system integrity value, the method comprises the following steps: a). the device waiting to access acquires its current system integrity value, and sends an authentication request including information containing the current system integrity value to the network access authentication device; b). the network access authentication device judges whether the current system integrity value of the device waiting to access in the received authentication request and its stored system integrity value of the device waiting to access are identical or not, according to the received authentication request and the correspondence; and, in a case where the received current system integrity value of the device waiting to access in the received authentication request and its stored system integrity value of the device waiting to access are identical, the network access authentication device determines that the network access is authenticated, so that the device waiting to access is allowed to access the network; otherwise, the network access authentication device determines that the network access is unauthenticated, so that the device waiting to access is not allowed to access the network, wherein the device waiting to access is a computer, and the process of calculating its basic system integrity value comprises the following steps: wherein the configured system parameters comprise: central processing unit (CPU) microcode software, enable or disable status configuration of various system functions, various authentication passwords, disk configuration parameters, peripheral configuration parameters and security function configuration parameters.