Trusted network connection implementing method based on tri-element peer authentication

A trusted network connection method based upon tri-element peer authentication, comprising:

• an operation 1 of performing configuration and initialization;
• an operation 2 of requesting a network connection:
• a access requester transmitting a network connection request to an access controller, and the access controller receiving the network connection request;
• an operation 3 of performing user identity authentication;
• and
• an operation 4 of performing platform authentication;
• wherein the operation 1 comprises:
• an operation 11 of a network user configuring the access requester with a security policy for the access controller, comprising a platform evaluation policy of the access requester for the access controller;
• and a network administrator configuring the access controller with a security policy for the access requester, comprising a platform evaluation policy of the access controller for the access requester;
• and
• an operation 12 of the access requester and the access controller loading and initializing respective integrity measurement collectors, and a policy manager loading and initializing an integrity measurement verifier;
• the operation 3 comprises:
• an operation 31 of branching to an operation 33 if the access requester or the access controller does not require user identity authentication;
• an operation 32 of, if the access requester or the access controller requires user identity authentication, then when the access requester and the access controller have not performed user identity authentication, the access requester and the access controller executing a tri-element peer authentication protocol with the policy manager being a trusted party to perform user identity authentication and key negotiation between the access requester and the access controller and performing the operation 33;
• or when the access requester and the access controller have performed user identity authentication, the access requester and the access controller performing user identity authentication and key negotiation between the access requester and the access controller based upon performed user identity authentication or executing the tri-element peer authentication protocol again based upon the policy manager being a trusted party to perform user identity authentication and key negotiation between the access requester and the access controller and performing the operation 33;
• and
• the operation 33 of, if the access requester or the access controller requires prompt making of an access decision, then when the access requester or the access controller does not require user identity authentication, each of the access requester and the access controller making an access decision according to a local security policy to perform access control;
• or when the access requester or the access controller requires user identity authentication, each of the access requester and the access controller making an access decision according to a user identity authentication result of the opposite party and the local security policy to perform access control;
• otherwise, the access requester or the access controller requesting platform authentication.