Patent ID: 8756654

Claim:
A trusted network management method over a trusted network connection based on tri-element peer authentication, comprising the steps of: 1) installing and configuring a trusted management agent residing in a managed host and a trusted management system residing in a managing host; 2) verifying the trusted management agent for trustworthiness on the managed host and the trusted management system for local trustworthiness; 3) if the managed host and the managing host have not been connected to a trusted network, connecting the managed host and the managing host to the trusted network respectively via a trusted network connection based on tri-element peer authentication, wherein the managed host and the managing host act as an access requestor (AR) in a trusted network connection architecture based on tri-element peer authentication, and then performing the step 4); if the managed host and the managing host have been connected to a trusted network, performing the step 4) directly; 4) performing, by the trusted management agent and the trusted management system, authentication and key negotiation; 5) if user authentication and key negotiation has not been completed between the managed host and the managing host, firstly performing, by the managing host and the managed host, mutual user authentication in a tri-element peer authentication protocol in which the managed host acts as an AR and the managing host acts as an access controller (AC), and then negotiating by the managed host and the managing host a session key using a primary key generated from the mutual user authentication and subsequently performing the step 6); if user authentication and key negotiation has been completed between the managed host and the managing host, performing the step 6) directly; 6) verifying, by the managed host and the managing host, remote trustworthiness of the trusted management agent and the trusted management system in the tri-element peer authentication protocol in which the managed host acts as an AR and the managing host acts as an AC; and 7) performing network management.