Memory system access authorizing method based on communication network

Abstract

The invention relates to a memory system access authorizing method based on a communication network, which comprises the following steps of: utilizing communication equipment, an authorized computer and an authorizing server as the replacement or supplement of the traditional authorizing technology; authenticating equipment for transmitting an authorizing request code and receiving an authorizing code by an authorizing system and isolating the equipment from authorized computer equipment; transferring the authorizing request code and the authorizing code by a ciphertext and a communication technology which is independent of the authorized computer system; and carrying out multi-identity authentication in the access authorizing process, wherein the authorizing request code and the authorizing code are only effective in limited time. Compared with the traditional password authorizing mechanism, an authorized computer does not need to be accessed into any communication network, the authorizing code is generated during authorization and has limited life cycle, and the risk brought by authorizing code leakage can be prevented; and compared with the traditional file key authorizing mechanism, the invention can prevent loss and damage of authorizing equipment or inconvenience without portability, is safe enough and has the characteristics of convenience and flexibility.

Description

technical field [0001] The invention relates to the field of information security, in particular to an authorization method, in particular to a storage system access authorization method based on a communication network. Background technique [0002] In addition to using firewalls and anti-virus products to defend against external threats, the information systems of modern enterprises have also become the main tool for protecting enterprise information assets. Secure storage system data for devices such as laptops, workstations and servers with data encryption solutions. Without authorization, the storage system will be encrypted and protected, even if it is connected to the network or other devices, the storage system data cannot be accessed. For computer equipment using storage system data encryption technology, all data on the storage system will be protected, and the risk of confidential data leakage is greatly reduced. [0003] Each storage system encryption product r...

AI Technical Summary

Problems solved by technology

In the two existing authorization methods, the authorization device independent of the authorization terminal system (such as a smart card or a USB storage device with a key file stored therein), will lead to authorization failure if the authorization device is lost, damaged or not carried , which may affect the normal enterprise business or the remote office work of the out-of-office staff; the password authorization method is used, although it will not be restricted by the decryption authorization device during use, but the password needs to be changed regularly and standardized management, and may also be caused by password leakage. The security of enterprise information assets is threatened

[0005] It can be seen that the management and use of file keys / passwords in existing authorization methods has always been a weak link in information security protection methods

Images