| With the rapid development of computer network technology and the popularity ofapplications, network security issues is becoming apparent increasingly, mainly for theterminal security. So building a trusted network terminal access control system from source toprevent risks is the key to network security management.In this paper, CA authentication technology,802.1x access authentication technology andwinpcap driver software are applied to achieve a trusted terminal authentication, trustedaccess authentication, identification of illegal operations, permission access of networkcontrol,system security maintenance control and other functions.Firstly, the paper developed a common terminal access802.1x authentication component,combined with CA identity authentication technology, the terminal authentication can becompleted by the interaction between a USBKey which is a hardware device with a digitalcertification and an CA server. Use the network number and PIN built-in USBKey as theunique identifier of the terminal authentication node, through the interaction of terminalcomponentsã€intermediate acess equipment and radius server to complete the terminal accessauthentication. Terminal component utilizes the winpcap driver software to get networkequipment information and capture network packets, the terminal illegal operations can beidentified by detecting multi-cards and analyzing the packets. Formulated a strategy whichdevides users and decentralize authority by group to realize the control of permission toaccess the network. Finally, a safe maintenance control module is developed to monitornetwork information and status about the end-user and end-host,which helps administratorsmanage network better.Based on the above study, combined with compatibility, security, stability, friendlyinterface and other design principles, a802.1x terminal access control system based on CAhas be developed and tested in a real network. The test results show that the system can relizethe trusted terminal authentication, trusted access authentication, identification of terminalproxy, permission access of network control, system security maintenance control functions.Besides, the good system stability, high efficiency certification can fully able to meet theneeds of network management. |
