Patent ID: 8424060
Filing Date: 2013-04-16
Classification: H04L

Abstract:
1. A method for trusted network access control (TNAC) based upon tri-element peer authentication, comprising: initializing Trustworthiness Measurement Collectors, TMCs, and a Trustworthiness Measurement Verifier, TMV, at a trustworthiness measurement layer; executing a tri-element peer authentication protocol based on a policy manager acting as a third party by an access requester, an access controller and the policy manager at a network access control layer to perform bidirectional user authentication between the access requester and the access controller; when results of the user authentication indicate successful authentication or that a platform trustworthiness evaluation process is required in a local policy, executing the tri-element peer authentication protocol based on the policy manager acting as a third party by the access requester, the access controller and the policy manager at a trusted platform evaluation layer to perform bidirectional platform trustworthiness evaluation between the access requester and the access controller; and generating by a TNAC client of the access requester and a TNAC server of the access controller according to results of platform trustworthiness evaluation in the platform trustworthiness evaluation process and transmitting corresponding recommendations respectively to the access requester and the access controller, and performing mutual access ports control by the network access requester and the network access controller, respectively, according to the recommendations.