A Periodic Integrity Measurements Authenticating Scheme Based on TNC Architecture

In this paper, we present a periodic authentication scheme of integrity measurements based on TNC architecture. In TNC architecture, server authenticates security posture of endpoint before an endpoint is allowed to access the network. After connected, the endpoint will not be supervised any more. Our scheme is the first to extend this before-access authentication to all-time authentication over endpoints. In fact, we show that by our scheme, the security posture of endpoint would be always monitored therefore the security of network can be improved greatly by cutting off malicious endpoint's connection. We also optimize this scheme to limit its impact on network's performance. Results show that these optimizations make the scheme more efficient and the scheme achieves a desirable effect in practical network.