An integrity check method for remote network service

Abstract

The utility model provides an integrity detecting method for the remote network service, which comprises a network service test protocol and a test system for the integrity at the server end; wherein, the protocol stipulates that the customer requests testing the integrity of the specific network by sending a message in a specific format to the specific network port of the remote server, and the message is expected to specify the interception port used in the network service to be tested. After receiving the request for testing, the remote server judges the current safety status of the specific network service by inspecting the integrity of the corresponding service progress, the corresponding service program image file and other relevant files based on the network service strategy, and feed back the test results to the customer, thus establishing a reliable path for the remote users to access network service. The method can be widely applied to various network service and is admirably accessible, moreover, the method is compatible with common server terminals and client terminals; the method can be implemented by a reliable module or process of the server terminal, therefore, the reliability does not depend on a specific network service program and is insusceptible to the intrusion of any malicious programs.

Description

technical field

[0001] The invention relates to the field of information security, in particular to the security guarantee technology of remote network services. Background technique

[0002] A security system must provide a mechanism to ensure that the user's path to the system is safe and credible, free from malicious program intrusion or forgery. For accessing the system through a local terminal, the existing operating system generally provides a trusted path mechanism. There are two common implementation methods: one is to reserve an uncoverable warning area on the display output interface of the system for Indicates the current security state of the system, and provides a mechanism for the user to call to switch the system to a secure state; the second is the Secure Attention Key (SAK) mechanism. The SAK key settings used by different systems may be different, and the title and specific processing may also be different, but the basic principle is the same, that is, the...

Images