Method and system for secure update of terminals in a large range

Abstract

The utility model discloses a safe update method for terminals over large range, which comprises: A, SCS ensures the execution delay time of the compulsive safe update instruction which is corresponding to each terminal controlled by the SCS; B, when SCS ensures that carrying out safe update for terminals over large range is needed, SCS controls each terminal to carry out safe update according to the corresponding execution delay time of the compulsive safe update instruction. The utility model also discloses a safe update system for a large range of terminals, which comprises, an SCS and terminals controlled by the SCS; the SCS is used for ensuring the execution delay time of the compulsive safe update instruction which is corresponding to each terminal controlled by the SCS, and controlling each terminal to carry out safe update according to the corresponding execution delay time of the compulsive safe update instruction when the SCS ensures that the safe update for a large range of terminals is needed; the terminal is used for safe update. With the technical proposal, the utility model has the advantages that the network congestion caused by carrying out safe update for a large range of terminals is decreased.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and a system for safely updating terminals in a wide range. Background technique [0002] In order to ensure network security and fight against network security threats brought by insecure terminals from the source, the Correlation Response System (CRS) provides multi-layer security control methods from network access control to application service control. [0003] As shown in Figure 1, the main entities in the CRS proposed in the ITU-T X.CRS proposal include: Security Association Agent (SCA) on the terminal side, Security Association Server (SCS) on the network side, and network access on the network side Controller (NAC) and Application Service Controller (ASC). SCA and SCS form the core of the Linked Response System. [0004] Among them, the SCA is responsible for collecting security-related information of the terminal, processing it to generate a security...

AI Technical Summary

Problems solved by technology

[0006] In the above method, if the same security update information is suitable for terminals in a wide range, the SCS will send a security update command to each terminal in a wide range, and the terminal will obtain the update from the security update server after receiving the security update command information, because a large number of terminals initiate security updates at the same time, the network path to the security update server is congested, and even the security update server is paralyzed due to a sudden and sharp increase in business volume; in addition, because the SCS sends security updates to each terminal separately Instructions also cause a sudden increase in network traffic, increase the system burden, and cause network congestion

Images