Firewall system and processing method thereof

Abstract

The invention provides a firewall system. The firewall system comprises firewall engine modules, one firewall engine module is arranged on a user terminal and used for capturing a data packet or a course of an application program which is executed by a user, the data packet is received by the user terminal from the internet, the firewall engine module can determine interception or releasing according to a part of firewall rules which the firewall engine module has, upload non-deterministic data packet or application program course information to a security platform server and execute interception or releasing according to a result returned by the security platform server; and the other firewall engine module is arranged on the security platform server and used for determining interception or releasing of the non-deterministic data packet or application program course information uploaded by the user terminal according to all firewall rules which the firewall engine module has and returning a determined result to the user terminal. The firewall system is suitable for user terminals of television, mobile phone, personal digital assistant (PDA) and the like which are difficult to install a complete firewall rule base.

Description

technical field [0001] The present invention relates to information security technology, in particular to a firewall system and its processing method. Background technique [0002] For a smart TV, in addition to receiving TV programs, it can also connect to the Internet and install various applications. In order to prevent illegal information on the network, such as virus data, hacker information, spam, etc. intercept. [0003] At present, for a computer, due to its large built-in memory capacity and high CPU performance, the firewall deployment method is: install a corresponding firewall on the terminal, and a corresponding huge rule base, and regularly pass The server provided by the firewall software service provider on the Internet downloads and updates the rule base to ensure the update of the firewall. [0004] For user terminals such as TVs, mobile phones, and PDAs, the built-in memory capacity is small, and the performance of the CPU is far lower than that of the ...

AI Technical Summary

Problems solved by technology

[0004] For user terminals such as TVs, mobile phones, and PDAs, the built-in memory capacity is small, and the performance of the CPU is far lower than that of the CPU used on the computer. Library, will greatly reduce the operating performance of these devices, and even affect the use of users

Even if the firewall software currently exists on mobile phones, it has simple functions and a very small rule base, which cannot achieve real protection capabilities

Images