摘要
随着新军事变革的深入发展和打赢未来信息化战争总要求的提出,军队信息化建设进程快速推进。提高军队信息化程度,充分发挥军队信息系统的效益,尽快形成部队战斗力,已经成为军队信息化建设的当务之急。然而,一方面军事信息系统中存在着大量的军事机密信息,另一方面又存在着各种对内、对外信息交互的客观需求,使得军事信息系统的安全面临严峻挑战。本文创新性地将可信计算技术引入到网间安全隔离系统中,通过终端完整性度量技术保证访问请求者终端的安全,通过远程证明技术将这种信任传递到了网络,最后提出了基于可信度量的访问控制模型,实现了高强度的访问控制。
With profound development of new military revolution and the requirement to win future information warfare,military informatization is developing rapidly.It is a top priority to improve the degree of military informatization,to leverage to the utmost the benefits of military information systems and to achieve operation effectiveness as soon as possible.However,a lot of confidential information is contained in military information systems while there is the demand for exchanging information with other information systems.Therefore,the security of military information systems faces serious challenges.This paper implements trusted computing technology in a network isolation system.TIM technology is used to perform integrity measurement of terminals when establishing a network connection,and remote attestation mechanism is used to prove credibility of the operating environment so that the confidence in the transmission network environment ensures the credibility of the entire network.Credibility of enhanced system access control is introduced in Role-Based Access Control(RBAC) model.
出处
《飞行器测控学报》
2010年第5期64-68,共5页
Journal of Spacecraft TT&C Technology
关键词
军事信息系统
网间安全隔离
新思路
可信计算
Military Integrated Information System
Internet Security Isolation
Trusted Computing
