Patent ID: 8407462

Claim:
A method for implementing network security access control, comprising: receiving terminal identity information that is encrypted in a bi-directional encryption mode and forwarded by a switch; decrypting the terminal identity information encrypted in the bi-directional encryption mode, and authenticating the decrypted terminal identity information; returning an authentication result to the switch, so that the switch controls access of a terminal to a network according to the authentication result; encrypting the decrypted terminal identity information in a solo-directional encryption mode; authenticating the terminal identity information encrypted in the solo-directional encryption mode; returning an authentication result to a security access control gateway, so that the security access control gateway controls access of the terminal to network resources according to the authentication result; and delivering a security policy to a security control module on the terminal, so that the security control module monitors the terminal according to the security policy; wherein the security policy delivered to the security control module on the terminal comprises: delivering the security policy of monitoring a port by using which the terminal accesses the network to the security control module on the terminal, monitoring a process running on the terminal, and checking whether illegal software is installed on the terminal, so as to monitor the port by using which the terminal accesses the network, monitor the processes running on the terminal and check whether the illegal software is installed on the terminal according to the security policy.