WO2009138026A1

WO2009138026A1 - A safety status estimate method, network apparatus and network system

Info

Publication number: WO2009138026A1
Application number: PCT/CN2009/071747
Authority: WO
Inventors: 贾科; 尹瀚; 任兰芳; 刘夫萍
Original assignee: 华为技术有限公司
Priority date: 2008-05-15
Filing date: 2009-05-12
Publication date: 2009-11-19
Also published as: CN101582810A

Abstract

A safety status estimate method, network apparatus and network system. The safety status estimate method includes: responding side receiving the communication request and the information of estimators trusted by the request side from the request side; according to the information of estimators, either the responding side or the request side determining the estimator trusted by both; the responding side obtaining the safety status estimating results of the request side by the estimator, which is achieved by the estimator according to the safety status information from the request side; the responding side responding to the communication request from the request side according to the estimating results. It is befitting to safety status estimate for communication entity.

Description

Safety state assessment method, network device and network system

The present invention relates to the field of network technologies, and in particular, to a security state evaluation method, a network device, and a network system.

Background technique

With the continuous development of network technology, the scale of the network is getting larger and larger, and the application of the network is becoming more and more extensive. At the same time, security issues in the network have become more frequent, and the network security situation has become increasingly severe. Terminals such as user hosts, workstations, and servers are the starting point and end point of network data flow, and are also the source of network security events. A large number of insecure terminals that are connected to the network will not only be the target of attack, but also may be exploited by attackers to become an intermediate medium for virus propagation and hacker attacks, thereby seriously affecting the normal operation of the entire network. Therefore, the network security problem brought by unsecured terminals must be solved from the source of network security risks.

The Trusted Computing Group (TCG) in 2005 promulgated the Trusted Network Connect (TNC) standard for enterprise networks. The TNC architecture includes: Access Requestor (AR), Policy Enforcement Point (PEP), Policy Decision Point (PDP), Metadata Access Point (MAP). ), flow controllers and sensors. When the AR requests access to a protected network, the PDP performs the evaluation of the AR security status information according to the security policy configuration of the network, and makes a decision based on the result of the evaluation. This decision is then passed to PEP, which responds to the AR's access request #.

In the process of implementing the present invention, the inventors have found that the following problems exist in the prior art: In the existing TNC architecture, when requesting access to the network, the terminal must advertise its own security status information to the network side, and the network side The security status information is evaluated. Therefore, when the TNC architecture is used to evaluate the security status of the terminal, the privacy of the terminal is not protected, and the security of the terminal is low. Summary of the invention

In one aspect, an embodiment of the present invention provides a security state evaluation method, which can fully protect the privacy of a communication entity, enhance the security of the communication entity, and improve the flexibility of the security state assessment.

The security state evaluation method of the embodiment of the present invention adopts the following technical solutions:

A method for assessing safety status, including:

The responder receives the communication request from the requesting party and the information of the evaluator trusted by the requesting party;

Determining, according to the evaluator's information, the evaluator that both parties trust; the responder obtains the evaluator's security status assessment result for the requestor, and the security status assessment result is The evaluator obtains based on security status information from the requesting party;

The responder responds to the requesting party's communication request according to the evaluation result.

In the security state evaluation method of the embodiment of the present invention, the requesting party and the responding party negotiate to determine the evaluator, and the evaluator evaluates the requesting party according to the security status information of the requesting party, and the responding party responds to the requesting party according to the evaluation result. Compared with the prior art, the requesting party does not need to advertise its own security status information to the responding party, thereby avoiding the attack due to the leakage of the security state information, fully protecting the privacy of the communicating entity, and enhancing the security of the communicating entity. Sexuality increases the flexibility of security status assessment.

In another aspect, embodiments of the present invention provide a network device capable of sufficiently protecting the privacy of a communication entity, enhancing the security of the communication entity, and improving the flexibility of the security state assessment.

The network device in the embodiment of the present invention adopts the following technical solutions:

A network device, including:

a security status information obtaining unit, configured to obtain security status information of the first communication entity, and an evaluation unit, configured to perform security status assessment on the first communication entity according to the security status information, and send the evaluation result to the A second communication entity communicating with the first communication entity, the second communication entity responding to the evaluated communication entity based on the evaluation result.

The network device of the embodiment of the present invention, the security state information acquiring unit acquires the communication that needs to be evaluated The security status information of the entity, the evaluation unit performs a security status assessment on the first communication entity according to the security status information, and sends the evaluation result to the second communication entity, where the second communication entity evaluates the result according to the result. The communicating entity responds. Compared with the prior art, the first communication entity does not need to advertise its own security status information to the second communication entity, thereby avoiding the attack due to the leakage of the security state information, fully protecting the privacy of the communication entity, and enhancing the The security of the communication entity increases the flexibility of the security status assessment.

In a third aspect, an embodiment of the present invention provides a network system capable of sufficiently protecting the privacy of a communication entity, enhancing the security of the communication entity, and improving the flexibility of the security state assessment.

The network system of the embodiment of the present invention adopts the following technical solutions:

A network system, including:

The requesting party is configured to request the responding party to establish communication, and inform the responding party of the information of the evaluator that it trusts;

a responding party, configured to receive information of an evaluator sent by the requesting party, determine an evaluator trusted by both parties according to the evaluator's information, and obtain an evaluation result of the evaluator on the requesting party, according to the evaluation result The requesting party responds;

The evaluator is used to obtain the security status information of the requesting party, evaluate the security status of the requesting party, and obtain the evaluation result.

In the network system of the embodiment of the present invention, the requesting party and the responding party determine the evaluator by negotiation, and the evaluator evaluates the requesting party according to the security status information of the requesting party, and the responding party responds to the requesting party according to the evaluation result. Compared with the prior art, the requesting party does not need to advertise its own security status information to the responding party, thereby avoiding the attack due to the leakage of the security state information, fully protecting the privacy of the communicating entity, and enhancing the security of the communicating entity. Sexuality increases the flexibility of security status assessment.

In a fourth aspect, an embodiment of the present invention provides a security state evaluation method, which can fully protect the privacy of a communication entity, enhance the security of the communication entity, and improve the flexibility of the security state assessment. The security state evaluation method of the embodiment of the present invention adopts the following technical solutions:

A method for assessing safety status, including:

The second communication entity receives the communication request from the first communication entity and the information of the evaluator trusted by the first communication entity;

The second communicating entity or the first communicating entity determines the first evaluator and the second evaluator that both parties trust according to the information of the evaluator trusted by the first communicating entity;

The second communication entity acquires an evaluation result of the first communication entity by the first evaluator, and the evaluation result of the first evaluator by the first evaluator is obtained by the first evaluator according to the security status information from the first communication entity;

The second communication entity responds to the first communication entity according to the evaluation result;

The first communication entity obtains an evaluation result of the second communication entity by the second evaluator, and the evaluation result of the second evaluator by the second evaluator is obtained by the second evaluator according to the security status information from the second communication entity;

The first communicating entity responds to the second communicating entity based on the evaluation result.

In the security state evaluation method of the embodiment of the present invention, the first communication entity and the second communication entity negotiate to determine respective evaluators, and each evaluator evaluates the communication entity according to the security status information of the communication entity that is evaluated by itself, and the two communication The entity responds to the opposite communication entity based on the evaluation results. Compared with the prior art, the two communication entities do not need to advertise their own security status information to the opposite communication entity, thereby avoiding the attack due to the leakage of the security status information, fully protecting the privacy of the communication entity, and enhancing the communication. The security of the entity increases the flexibility of the assessment of the security status.

In a fifth aspect, an embodiment of the present invention provides a network system capable of fully protecting the privacy of a communication entity, enhancing the security of the communication entity, and improving the flexibility of the security state assessment.

A network system, including:

a first communication entity, configured to send a communication request to the second communication entity, notify the second communication entity of the information of the evaluator that is trusted by the second communication entity, and obtain an evaluation result of the second communication entity by the second evaluator, Responding to the second communication entity based on the evaluation result;

a second communication entity, configured to receive information from an evaluator of the first communication entity, determine, according to the information of the evaluator trusted by the first communication entity, the first evaluator and the second evaluator trusted by both parties to obtain the first assessment The result of the evaluation of the first communication entity, and the response to the first communication entity # according to the evaluation result;

a first evaluator, configured to obtain security status information of the first communication entity, and evaluate a security status of the first communication entity to obtain an evaluation result;

The second evaluator is configured to obtain security status information of the second communication entity, and evaluate the security status of the second communication entity to obtain an evaluation result.

In the network system of the embodiment of the present invention, the first communication entity and the second communication entity negotiate to determine respective evaluators, and each evaluator evaluates the communication entity according to the security status information of the communication entity that it evaluates, and the two communication entities are The evaluation results respond to the contralateral communication entity. Compared with the prior art, the two communication entities do not need to advertise their own security status information to the opposite communication entity, thereby avoiding the attack due to the leakage of the security status information, fully protecting the privacy of the communication entity, and enhancing the communication. The security of the entity increases the flexibility of the assessment of the security status.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without paying creative labor.

1 is a flowchart of a security state evaluation method according to an embodiment of the present invention;

2 is a flowchart of Embodiment 1 of a method for evaluating a security state according to the present invention;

3 is a flowchart of Embodiment 2 of a method for evaluating a security state according to the present invention;

4 is a flowchart of another security state evaluation method according to an embodiment of the present invention;

FIG. 5 is a flowchart of Embodiment 3 of a method for evaluating a security state according to the present invention;

6 is a flowchart of Embodiment 4 of a method for evaluating a security state according to the present invention; FIG. 7 is a schematic structural diagram of a network device according to an embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of a network system according to an embodiment of the present disclosure;

FIG. 9 is a schematic structural diagram of another network system according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without making creative labor are within the scope of the present invention.

In order to make the advantages of the technical solutions of the present invention clearer, the present invention will be described in detail below with reference to the accompanying drawings and embodiments.

In all of the following embodiments of the present invention, the security status information includes version information of the operating system installed by the communication entity, patch information, firewall version information, antivirus software version information, or browser version information.

In all of the following embodiments of the present invention, the types of the requesting party, the responding party, and the communicating entity may be a mobile phone, a PDA, a computer, a server, a home appliance, and various network devices (such as a network server or a service provider or an application server, etc.) ), electronic equipment or computer related equipment.

In all of the following embodiments of the present invention, the type of the network may be a mobile network, a fixed network, a mobile fixed convergence network, a local area network, a metropolitan area network, a wide area network, or a peer-to-peer network (P2P), a client/server. Architecture of the network (C / S) and so on.

In all of the following embodiments of the present invention, the communication request may be a communication request of each layer of the network, including a physical layer, an access request of the link layer, and a service or service request of the application layer.

Embodiments of the present invention provide a security state evaluation method, which can fully protect the privacy of a communication entity, enhance the security of the communication entity, and improve the flexibility of the security state assessment.

As shown in Figure 1, the security status assessment methods include:

Step 101: The responder receives the communication request from the requesting party and the information of the evaluator trusted by the requesting party; the communication request and the evaluator's information may be encapsulated in the same message, or So that the package is sent separately;

Step 1 02: According to the evaluator's information, the responder or the requesting party determines an evaluator that both parties trust;

The process of the responder or the requesting party determining the evaluator that both parties trust may be: the evaluator's information includes a plurality of optional evaluators from which the responder selects an evaluator that both parties trust; or, the responder will The evaluator trusted by itself informs the requesting party that the requesting party selects the evaluator that both parties trust;

Step 1 03: The responder obtains the evaluation result of the security status of the evaluator by the evaluator, and the security status evaluation result is obtained by the evaluator according to the security status information from the requesting party;

Step 1 04: The responder responds to the requesting party's communication request according to the evaluation result.

In the security state evaluation method of the embodiment of the present invention, the requesting party and the responding party negotiate to determine the evaluator, and the evaluator evaluates the requesting party according to the security status information of the requesting party, and the responding party responds to the requesting party according to the evaluation result. Compared with the prior art, the requesting party does not need to advertise its own security status information to the responding party, thereby avoiding the attack due to the leakage of the security state information, fully protecting the privacy of the communicating entity, and enhancing the security of the communicating entity. Sex, improve the flexibility of security status assessment. Embodiment 1:

In this embodiment, the requester A requests the responder B for the network service. After the two parties negotiate, the B selects the evaluator C that both parties trust, and the evaluator C evaluates the security status information of the requester A. As shown in FIG. 2, the specific implementation process of this embodiment includes the following steps:

Step 201: The requesting party A requests the responding party B for the network service, and the requesting party A informs the responding party B of the information of the evaluator (D, E) that it trusts;

The network service is web browsing or accesses a network domain managed by the responder B. The identifier of the evaluator's IP address, MAC address, device identifier, etc. is sent to the responder 8.

Step 202: The responder B directly selects the evaluator C that both parties trust according to the information of the evaluator (D, E) trusted by the requester A;

Step 203: The evaluator C obtains the security status information of the requester A, and completes the evaluation of the requester A;

The evaluator C may perform real-time evaluation on the requester A according to the security status information according to the security policy or the security policy of the responder B;

Alternatively, the evaluator C directly calls his own stored evaluation of the requester A.

Step 204: Responder B obtains the evaluation result of the evaluator C on the requester A;

Wherein, the responder B can directly request the evaluator C to evaluate the result of the requester A; or, the evaluator C sends the evaluation result to the requester A, and the requester A sends the evaluation result with the evaluator C identification to the response. Party 8.

Step 205: The responder B responds to the requester A according to the evaluation result;

The response of the responder B to the requester A is: the responder B allows the requester A to fully access the network, or the responder B allows the requester A to access the network, or the responder B rejects the requester.

A access to the network.

Embodiment 2:

In this embodiment, the requester A requests the responder B to establish communication. After the two parties negotiate, A selects the evaluator C that both parties trust, and the evaluator C evaluates the security status information of the requester A. As shown in FIG. 3, the specific implementation process of this embodiment includes the following steps:

Step 301: The same as step 201;

Step 302: Responder B informs the evaluator (D) that it trusts the requester A;

Step 303: The requester A selects the evaluator C that both parties trust;

Step 304: The same as step 203;

Step 305: The same as step 204; Step 306: Same as step 205.

Therefore, with the security state evaluation method of the embodiment of the present invention, the privacy of the communication entity can be fully protected, the security of the communication entity is enhanced, and the flexibility of the security state evaluation is improved.

Embodiments of the present invention provide another security state evaluation method, which can fully protect the privacy of a communication entity, enhance the security of the communication entity, and improve the flexibility of the security state assessment.

As shown in Figure 4, the security status assessment methods include:

Step 401: The second communication entity receives the communication request from the first communication entity, and the information of the evaluator trusted by the first communication entity;

Step 402: The second communication entity or the first communication entity determines a first evaluator and a second evaluator that both parties trust according to the information of the evaluator trusted by the first communication entity; wherein the first evaluator is responsible for the first communication The entity is assessed for security status and the second evaluator is responsible for assessing the security status of the second communicating entity.

Step 403: The second communication entity acquires an evaluation result of the first communication entity by the first evaluator, and the first evaluator evaluates the first communication entity by the first evaluator according to the security status information from the first communication entity. Obtain;

Step 404: The second communication entity responds to the first communication entity according to the evaluation result. Step 405: The first communication entity acquires an evaluation result of the second communication entity by the second evaluator, where the second evaluator The evaluation result of the two communication entities is obtained by the second evaluator according to the security status information from the second communication entity;

Step 406: The first communication entity responds to the second communication entity according to the evaluation result. In the security state evaluation method of the embodiment of the present invention, the first communication entity and the second communication entity negotiate to determine respective evaluators, and each evaluator evaluates the communication entity according to the security status information of the communication entity that is evaluated by itself, and the two communication The entity responds to the opposite communication entity based on the evaluation results. Compared with the prior art, the two communication entities do not need to advertise their own security status information to the opposite communication entity, thereby avoiding the attack due to the leakage of the security status information, fully protecting the privacy of the communication entity, and enhancing the communication. The security of the entity increases the flexibility of the assessment of the security status. Embodiment 3:

In this embodiment, both the communication entity A and the communication entity B that need to communicate need to know the evaluation result of the other party, and the two parties negotiate to determine that the evaluator of the communication entity A is the evaluator C, and the evaluator of the communication entity B is the evaluator D. The evaluator C and the evaluator D complete the evaluation of the communication entity A and the communication entity B, respectively, and the communication parties respond to the request of the other party according to the evaluation result given by the evaluator. As shown in FIG. 5, the specific implementation process of the embodiment includes the following steps:

Step 501: The communication entity A requests the communication entity B to establish communication, and simultaneously informs the communication entity B of the information of the evaluators C, D, E trusted by the communication entity A; the evaluator's IP address, MAC address, device identifier can be The identification is sent to the communicating entity B.

Step 502: The communication entity B informs the evaluator (D) that it trusts the communication entity A;

Step 503: The communication entity B selects the evaluator D as its own evaluator;

Step 504: The communication entity A selects the evaluator C as its own evaluator;

Step 505: The evaluator C completes the evaluation of the communicating entity A;

Step 506: The evaluator D completes the evaluation of the communication entity B;

Step 507: The communication entity B obtains the evaluation result of the evaluator C on the communication entity A;

The evaluation result is a result obtained by the evaluator C evaluating the communication entity A according to the security status information of the communication entity A;

Alternatively, the evaluation result is an evaluation result of the communication entity A stored by the evaluator C. Step 508: The communication entity A obtains the evaluation result of the evaluator D on the communication entity B;

The evaluation result is a result obtained by the evaluator D evaluating the communication entity B according to the security state information of the communication entity B;

Alternatively, the evaluation result is an evaluation result of the communication entity B stored by the evaluator D. Step 509: The communication entity B according to the evaluation result of the evaluator C to the communication entity A, to the communication entity A

#出出响应; Step 510: The communication entity A responds to the communication entity B# according to the evaluation result of the evaluator D to the communication entity B.

Step 511: A and B complete the two-way evaluation, and the two parties establish communication.

The step 503 may be performed after the step 504; the step 505 may be performed after the step 506, or the step 505 and the step 506 may be performed simultaneously; the step 507 may be performed after the step 508, or the step 507 and the step 508 Simultaneous execution; the step 509 can be performed after step 510.

Embodiment 4

In this embodiment, the application scenario is a migration decision of the virtual machine in the virtual trusted platform, and the virtual migration authority (MA, Mi gra t i on Author ty ).

There are two forms of MA: One is the data center MA, and all the virtual machines and virtual platforms in the scope of the data center MA are managed. In the virtual machine creation (crea te) and destruction (des t roy), the virtual The platform needs to notify the data center MA; the other is the local MA, and the local MA may be a functional component in the virtual machine monitor layer where the virtual machine is located, or may be located at the virtual machine monitor layer as the virtual machine. A specific virtual machine above. There can be a local MA on both the source platform and the target platform. You can use one of them when communicating, or you can use both at the same time.

When the source platform needs to migrate the local virtual machine to the target platform due to load balancing or fault repair of the lower layer of the virtual machine monitor layer, a third party is required based on various security attribute requirements of the target platform. MA) to do these security attribute checks. Since the MA exists in various forms, both parties can complete the negotiation.

As shown in FIG. 6, the specific implementation process of this embodiment includes the following steps:

Step 601: The source platform sends a migration request to the target platform, and carries the MA trusted by the source platform. The data can be the data center, the local port of the source platform, or the local port of the target platform.

Step 602: After receiving the migration request sent by the migration request component of the source platform, the target platform selects a defect that is trusted by the target platform, and the source platform trusts both the source platform and the target platform. The platform is used in conjunction with the target platform. Here, the selected MA is one of the data center MA, the local MA of the source platform, or the local MA of the target platform.

Step 603: The target platform informs the source platform of the result of the selection. At this point, the source platform and the target platform negotiate to determine an MA that both parties trust.

The above steps 602-603 are performed by the target platform (responder) to determine an MA that both parties trust, and inform the source platform (requesting party) of the selection result, which is similar to the method disclosed in Embodiment 1.

Similar to the method disclosed in the second embodiment, when the source platform (requesting party) selects an MA that is trusted by both parties, the step 602 and the step 603 may be replaced by the following steps 602a and 603a: Step 602a: Target platform receiving After the migration request sent by the migration request component of the source platform, select a plurality of MAs that are trusted by the source platform, and notify the source platform, where the multiple MAs include the data center MA, the local MA of the source platform, and the local MA of the target platform. At least two of them.

Step 603a: The source platform selects, from the plurality of MAs, an MA that is trusted by both parties, and is used by the source platform and the target platform, and notifies the target platform of the selection result.

Similar to the method disclosed in the third embodiment, when the source platform (communication entity A) and the target platform (communication entity B) negotiate to determine an MA that each party trusts, the step 602 and the step 603 may be performed by the following step 602b and 603b replacement:

Step 602b: After receiving the migration request sent by the migration request component of the source platform, the target platform selects the local MA of the target platform for use by the target platform, and selects multiple MAs trusted by the source platform to inform the source platform.

Step 603b: The source platform selects a local MA of the source platform from the plurality of MAs, and uses the source MA for the source platform, and notifies the target platform of the selection result.

Step 604: The source platform sends, to the selected MA, information required for the attribute requirements of the target platform and other related migration decisions;

Step 605: The selected MA performs necessary evaluation on the source platform;

Step 606: The selected MA performs necessary attribute check on the target platform;

Step 607: The source platform acquires an attribute request check result of the MA on the target platform. Step 608: The target platform acquires an attribute request check result of the MA to the source platform.

Step 609: The source platform and the target platform perform a check result according to the obtained MA to each other, and respond to the other party to perform virtual machine migration.

The step 605 may be performed after the step 606, or the step 605 and the step 606 may be performed simultaneously; the step 607 may be performed after the step 608, or the step 607 and the step 608 are performed simultaneously.

Embodiment 5:

In this embodiment, both the communication entity A and the communication entity B that need to communicate need to know the evaluation result of the other party. After the two parties negotiate, it is determined that the evaluator of the communication entity A and the communication entity B are the same evaluator C, and the evaluator C The evaluation of the communication entity A and the communication entity B is completed, and the communication parties respond to the request of the other party according to the evaluation result given by the evaluator C. The specific implementation process of this embodiment is similar to that of the third embodiment, and details are not described herein again.

Therefore, with the security state evaluation method of the embodiment of the present invention, the privacy of the communication entity can be fully protected, the security of the communication entity is enhanced, and the flexibility of the security state assessment of the communication entity is improved.

Embodiments of the present invention also provide a network device capable of sufficiently protecting the privacy of a communication entity, enhancing the security of the communication entity, and improving the flexibility of the security state assessment.

The network device may be a computer, a server, or implemented by software, and the network device may be deployed at a network layer or an application layer.

As shown in FIG. 7, the network device includes:

The security status information obtaining unit 701 is configured to obtain security status information of the first communication entity, and the evaluation unit 702 is configured to perform security status assessment on the first communication entity according to the security status information, and send the evaluation result to the The second communication entity communicated by the first communication entity is responsive to the evaluated communication entity by the second communication entity according to the evaluation result.

In the network device of the embodiment of the present invention, the security status information acquiring unit 701 acquires the security status information of the communication entity that needs to be evaluated, and the evaluation unit 702 evaluates the first communication entity according to the security status information, and sends the evaluation result to the first a second communication entity, according to the second communication entity The result is responsive to the evaluated communication entity. Compared with the prior art, the first communication entity does not need to advertise its own security status information to the second communication entity, thereby avoiding the attack due to the leakage of the security state information, fully protecting the privacy of the communication entity, and enhancing the The security of the communication entity increases the flexibility of the security status assessment.

As shown in FIG. 7, the network device further includes:

The storage unit 703 is configured to store an evaluation result of the evaluated communication entity.

Therefore, with the network device of the embodiment of the present invention, the privacy of the communication entity can be fully ensured, the security of the communication entity is enhanced, and the flexibility of the security state evaluation is improved.

Embodiments of the present invention also provide a network system capable of sufficiently protecting the privacy of a communication entity, enhancing the security of the communication entity, and improving the flexibility of the security state assessment.

As shown in FIG. 8, the network system includes:

The requesting party 801 is configured to request the responding party 802 to establish a communication, and inform the responding party 802 of the information of the evaluator that it trusts;

The responder 802 is configured to receive the information of the evaluator sent by the requesting party 801, determine, according to the evaluator's information, an evaluator 803 that both parties trust, and obtain an evaluation result of the evaluator 803 on the requesting party 801, according to The evaluation result responds to the requesting party 801;

The evaluator 803 is configured to obtain the security status information of the requesting party 801, and evaluate the security status of the requesting party 801 to obtain an evaluation result.

In the network system of the embodiment of the present invention, the requesting party and the responding party negotiate to determine an evaluator, and the evaluator evaluates the requesting party according to the security status information of the requesting party, and the responding party responds to the requesting party according to the evaluation result. Compared with the prior art, the requesting party does not need to advertise its own security status information to the responding party, thereby avoiding the attack due to the leakage of the security state information, fully protecting the privacy of the communicating entity, and enhancing the security of the communicating entity. Sexuality increases the flexibility of security status assessment.

The evaluator 803 includes:

The storage module 804 is configured to store the evaluation result of the evaluated requester 801. The storage module 804 stores the evaluation result of the evaluated requester, and the requesting party can directly obtain the evaluation result of the evaluator from the requesting party.

Therefore, with the network system of the embodiment of the present invention, the privacy of the communication entity can be fully protected, the security of the communication entity is enhanced, and the flexibility of the security state evaluation is improved.

Embodiments of the present invention also provide another network system capable of fully protecting the privacy of a communication entity, enhancing the security of the communication entity, and improving the flexibility of the security state assessment.

As shown in FIG. 9, the network system includes:

The first communication entity 901 is configured to send a communication request to the second communication entity 902, notify the second communication entity 902 of the information of the evaluator that it trusts, and obtain the evaluation result of the second evaluator 904 by the second evaluator 904, according to The evaluation result is responsive to the second communication entity 902;

The second communication entity 902 is configured to receive information from the evaluator of the first communication entity 901, and determine, according to the information of the evaluator trusted by the first communication entity 901, the first evaluator 903 and the second evaluator 904 that both parties trust. Obtaining an evaluation result of the first communication entity 901 by the first evaluator 903, and responding to the first communication entity 901 according to the evaluation result;

The first evaluator 903 is configured to obtain security state information of the first communication entity 901, and evaluate the security state of the first communication entity 901 to obtain an evaluation result;

The second evaluator 904 is configured to obtain security status information of the second communication entity 902, and evaluate the security status of the second communication entity 902 to obtain an evaluation result.

The first evaluator 903 and the second evaluator 904 respectively include:

The storage module 905 is configured to store an evaluation result of the evaluated communication entity. The storage module stores the evaluation result of the evaluated communication entity, and the one-side communication entity can directly obtain the evaluation result of the evaluator from the other side communication entity from the storage module.

All of the embodiments of the present invention can be applied to network access services of temporary terminals in airports, cafes, libraries, and the like. For example, in an airport, a passenger's laptop, PDA, etc., in order to protect their privacy and security before requesting access to the airport's network management server, need to negotiate with the airport's network management server to determine the third-party evaluators trusted by both parties. Third-party evaluators evaluate the security status of passengers' laptops, PDAs, etc. Similarly, the airport's network management server will negotiate with passengers' laptops, PDAs, etc. to ensure that both parties trust in order to protect themselves from unauthorized access. A third-party evaluator, a third-party evaluator conducts a security status assessment of the airport's network management server. The third-party evaluator may be a network device such as a server on the network.

Those of ordinary skill in the art will appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software or a combination of both, in order to clearly illustrate hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

The steps of a method or algorithm described in connection with the embodiments disclosed herein can be implemented in hardware, a software module executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or technical field Any other form of storage medium known.

The foregoing is only a specific embodiment of the embodiments of the present invention, but the scope of protection of the embodiments of the present invention is not limited thereto, and any technical person disclosed by the skilled person in the technical field disclosed in the present invention Variations or substitutions that are conceivable within the scope of the invention are intended to be encompassed within the scope of the invention. Therefore, the scope of protection of the embodiments of the present invention should be determined by the scope of protection of the claims.

Claims

Claim

A method for evaluating a security state, comprising:

The responder receives the communication request from the requesting party and the information of the evaluator trusted by the requesting party; according to the evaluator's information, the responding party or the requesting party determines an evaluator that both parties trust; the responding party obtains The evaluator evaluates the security status of the requesting party, and the security status assessment result is obtained by the evaluator according to the security status information from the requesting party;

2. The security state assessment method according to claim 1, wherein the step of the responder or the requestor determining the evaluator trusted by both parties comprises:

The responder selects an evaluator that both parties trust based on the information of the evaluator trusted by the requesting party; or, the responder sends the information of the evaluator that it trusts to the requesting party, and the requesting party selects the evaluator to which both parties trust.

3. The security state assessment method according to claim 1, wherein the step of obtaining the security state assessment result by the evaluator according to the security state information from the requesting party comprises:

The evaluator evaluates the requestor according to the security status information; or

The evaluator extracts the evaluation results stored by itself on the requesting party.

The security state evaluation method according to claim 3, wherein the step of evaluating the requester by the evaluator according to the security status information comprises:

The evaluator evaluates the requestor according to the security status information according to a policy provided by itself; or

The evaluator evaluates the requestor based on the security status information in accordance with a policy provided by the responder.

The security state evaluation method according to claim 1, wherein the step of the responder obtaining the evaluation result of the security status of the requester by the evaluator includes:

The response direction evaluator requests an evaluation result of the requesting party; or

The evaluator sends the evaluation result to the requesting party, and the requesting party sends the evaluation result with the evaluator identification To the responder.

The security state evaluation method according to any one of claims 1 to 5, wherein the security state information comprises:

Version information, patch information, firewall version information, anti-virus software version information, or browser version information of the operating system installed by the requester.

7. A method for assessing a safety state, comprising:

The second communicating entity or the first communicating entity determines the first evaluator and the second evaluator that both parties trust based on the information of the evaluator trusted by the first communicating entity;

The second communication entity obtains an evaluation result of the first communication entity by the first evaluator, and the evaluation result of the first evaluator by the first evaluator is obtained by the first evaluator according to the security status information from the first communication entity;

The first communication entity acquires an evaluation result of the second communication entity by the second evaluator, and the evaluation result of the second evaluator by the second evaluator is obtained by the second evaluator according to the security status information from the second communication entity;

8. The security state evaluation method according to claim 7, wherein the first evaluator obtains the evaluation result of the first communication entity by the first evaluator according to the security state information obtained from the first communication entity. Includes:

The first evaluator evaluates the first communicating entity based on the security status information from the first communicating entity; or

The first evaluator extracts the evaluation results stored by itself for the first communicating entity.

9. The security state assessment method according to claim 7, wherein the evaluation result of the second evaluator by the second evaluator is determined by the second evaluator according to the security state from the second communication entity. The steps for obtaining information include:

The second evaluator evaluates the second communicating entity based on the security status information from the second communicating entity; or

The second evaluator extracts the evaluation result stored by itself for the second communication entity.

10. A network device, comprising:

a security status information obtaining unit (701), configured to obtain security status information of the first communication entity, and an evaluation unit (702), configured to perform security status assessment on the first communication entity according to the security status information, and The result is sent to a second communication entity in communication with the first communication entity, the second communication entity responding to the evaluated communication entity based on the evaluation result.

The network device according to claim 10, wherein the network device further comprises: a storage unit (703), configured to store an evaluation result of the evaluated communication entity.

12. A network system, comprising:

The requesting party (801) is configured to request the responding party (802) to establish communication, and inform the responding party of the information of the evaluator that it trusts (802);

The responder (802) is configured to receive information of the evaluator sent by the requesting party (801), determine an evaluator (803) trusted by both parties according to the evaluator's information, and obtain the evaluator (803) pair. The evaluation result of the requesting party (801), responding to the requesting party (801) according to the evaluation result;

The evaluator (803) is configured to obtain security status information of the requesting party (801), and evaluate the security status of the requesting party (801) to obtain an evaluation result.

13. The network system according to claim 12, wherein the evaluator (803) comprises: a storage module (804) configured to store an evaluation result of the evaluated requestor (801).

14. A network system, comprising:

The first communication entity (901) is configured to send a communication request to the second communication entity (902), notify the second communication entity (902) of the information of the evaluator trusted by itself, and obtain the second evaluator (904) to the second The evaluation result of the communication entity (902) responds to the second communication entity (902) according to the evaluation result; the second communication entity (902) is configured to receive information from the evaluator of the first communication entity (901) , Determining, by the information of the evaluator trusted by the first communication entity (901), a first evaluator (903) and a second evaluator (904) that both parties trust, and obtaining a first evaluator (903) for the first communicating entity ( The evaluation result of 901), responding to the first communication entity (901) according to the evaluation result;

a first evaluator (903), configured to obtain security status information of the first communication entity (901), and evaluate a security status of the first communication entity (901) to obtain an evaluation result;

The second evaluator (904) is configured to obtain security status information of the second communication entity (902), and evaluate the security status of the second communication entity (902) to obtain an evaluation result.

15. The network system of claim 14, wherein the first evaluator (903) and the second evaluator (904) comprise:

The storage module (905) is configured to store the evaluation result of the evaluated communication entity.