Method and apparatus for realizing information safety

Abstract

The disclosed method and device for information security comprise: setting a network communication controller in the hardware and other special control members for providing message for whether device I / O interface on work state, and ensuring the device cannot provide network communication without installing a special control member for the control software. It can automatic detect periodically to decide whether the device access the internet. This invention can prevent that the device with secret data illegal accessing Internet efficiently.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and equipment for realizing information security. Background technique [0002] With the continuous development of information and network technology, leaks through the network continue to occur, often causing heavy losses to the country and enterprises. These include a large number of users who take confidential information equipment (especially portable information equipment such as portable computers) out of the unit or take them home, and violate relevant security and confidentiality regulations, and illegally connect them to the Internet (Internet) or connect to the Internet without authorization. The network or other networks that are prohibited from connecting, are attacked by network hackers to steal confidential information or users actively send confidential information, etc., resulting in leakage incidents. Since portable information devices such...

AI Technical Summary

Problems solved by technology

[0004] The problem with security and confidentiality rules and regulations is that their implementation depends entirely on people’s subjective consciousness, and it is impossible to guarantee technically that they can be truly observed and implemented by portable computer users.

There are two problems in this technology: (1) this technology can only provide the log data required for post-event inspection and analysis, and cannot prevent the occurrence of leaking incidents in time; Various ways to bypass, for example: information device users can choose to install or not install the software, if the user chooses not to install, the user can also perform illegal online operations; in addition, the user can also pass through various There are various methods or tools to delete historical records, reinstall the system, or even format the hard disk, thereby deleting the Internet log and passing the security inspection smoothly, so that such technology cannot play any role in security and confidentiality supervision.

These methods have the following problems: (1) The method of physical destruction makes the information equipment completely lose the function of accessing the Internet, causing users to be unable to use the computer to access the Internet when they need to access the legal network; (2) Control passwords or control If the equipment is managed by a security administrator, in fact, the security management is closely bound to the normal operation process, and the user of the information equipment needs the security administrator to execute the password every time before using the information equipment to access the legal network for Internet operations. Input or control device plug-in operation is very cumbersome and lacks operability

[0007] It can be seen that in the prior art, it is impossible to technically force the user to use the preventive technology, and even if the user has used the preventive technology in advance, the preventive technology can only be analyzed and checked after the event, resulting in the inability to Automatically prevent the occurrence of illegal Internet behaviors in time

[0008] In addition, in the prior art, there are also defects such as the inability to provide normal network communication functions in the case of legally surfing the Internet.

Images