Patent ID: 8191113

Claim:
A trusted network connect (TNC) system based on tri-element peer authentication (TePA), comprising an access requestor (AR), an access controller (AC), and a policy manager (PM), wherein the AR and the AC are connected through protocol interfaces, the AC and the PM are connected through protocol interfaces, and the AR is connected to the PM through the AC; the protocol interfaces connecting the AR and the AC comprise: a network authorization transport protocol interface (IF-T) configured to implement mutual user authentication and key agreement between the AR and the AC, and mutual access control between the AR and the AC; and a integrity evaluation Interface (IF-TNCCS) configured to implement platform integrity evaluation between the AR and the AC by enabling the PM to validate attestation identity key (AIK) certificates of the AR and the AC and verify platform integrity of the AR and the AC; the protocol interfaces connecting the AC and the PM comprise: a user authentication authorization interface (IF-UAA) configured to implement mutual user authentication and key agreement between the AR and the AC, and mutual access control between the AR and the AC; a platform evaluation authorization interface (IF-PEA) configured to implement platform integrity evaluation between the AR and the AC, and enable the PM to validate AIK certificates of the AR and the AC and verify platform integrity of the AR and the AC; and an integrity measurement interface (IF-M) configured to collect and verify platform integrity-related information of the AC; and the IF-M configured to collect and verify platform integrity-related information of the AR is provided between the AR and the PM.