Network security management method and system thereof

Abstract

The invention relates to a network security management method and a system thereof. The method comprises the following steps that: encrypted tunnels are established in a safe network card and a safe switch use certificate; the safe network card requires the identity authentication of the safe switch; if the identity is qualified, the safe switch distributes a communication key to the safe network card; otherwise, the failed authentication information is sent back; after the safe network card acquires the key, the local data is started to be encrypted and decrypted; and the generation of the IP protocol communication is realized. The system has a structure which is as follows: a controlled host computer is connected with the safe network card for realizing the function of the identity authentication, the key management, the communication and encryption and the local data encryption; and the safe network card is connected with the safe switch for the strategy management, the configuration management, the user identity authentication of the safe network card and the distribution of the communication key. The method and the system can realize the three-level defense of the information source defense, the information transmitter defense and the information user defense with perfect safety functions and have the characteristics of disclosure prevention and high safety degree.

Description

technical field [0001] The invention relates to a network security management method and system thereof, in particular to a management system and method for realizing a secure network based on local data encryption and transmission encryption. Background technique [0002] With the development of science and technology, network technology is changing with each passing day, and the application of office automation and Internet is becoming more and more popular. Enterprises or units transmit information to each other through the Internet, and enterprises or units transmit information to each other through local area networks. Therefore, network information security Questions matter. [0003] At present, widely used firewalls, IDS, internal and external network isolation, and other access control systems for external networks can effectively prevent attacks from outside the network, but there has been no good prevention method for the confidentiality of information inside the n...

AI Technical Summary

Problems solved by technology

[0005] In order to overcome the deficiencies of the existing network information security management system, which have imperfect security functions and a low security level, the present invention provides a network security management method, which has the characteristics of anti-leakage and high security

Images