论文部分内容阅读
无线局域网(wireless LAN,WLAN)是移动办公网络的重要组成部分,但因其缺乏平台完整性验证机制及有效的域间访问控制机制,致其难以安全高效地支持更多新业务的应用及推广。提出了一种新型企业WLAN访问控制方案,结合可信平台模块及属性基访问控制思想,将信任链扩展至WLAN域间,并在域间切换过程中实现基于用户属性的细粒度访问控制,确保企业网络安全、可信。
Wireless LAN (WLAN) is an important part of mobile office network. However, because of its lack of platform integrity verification mechanism and effective inter-domain access control mechanism, it is difficult to safely and efficiently support the application and promotion of more new services . A new scheme of enterprise WLAN access control was proposed. Based on the idea of trusted platform module and attribute-based access control, the trust chain was extended to WLAN inter-domain, and fine-grained access control based on user attributes was implemented during inter-domain handover. Enterprise network security, credible.