Secure access logic control method based on terminal access behavior and platform server

Abstract

The invention discloses a secure access logic control method based on a terminal access behavior and a secure access platform server. A logic control module of the terminal access behavior is arranged at a secure access platform server terminal; information, such as terminal access authority, scene judging parameters, a dot matrix area command comparison table and the like is configured; each data package of terminal access intranet resource is redirected into an agent program which corresponds to the logic control module; and the logic control module identifies the terminal access behavior in various modes to control forwarding or discard. The method of the invention executes classification and identification of character commands, such as FTP (File Transfer Protocol), TELNET, SSH (Secure Shell) and the like, RDF (Resource Description Framework) graphical interface operation and user free interface system operation for the terminal access behavior on the secure access platform server terminal, and judges whether the execution is permitted or not according to identified commands and user authority logic control, so that the difficulty of resource management is simplified, the repeated authentication of each system is avoided; and the identification and the logic control of the character commands, the graphical interface operation and the like are solved.

Description

technical field [0001] The present invention relates to a terminal access control method in the technical field of information security, in particular to a secure access logic control method based on terminal access behavior and a secure access platform server. Background technique [0002] The traditional method of using information systems is mainly based on physical access, and each system is managed separately. Users need to switch systems frequently, and perform identity authentication and authority control repeatedly. With the rapid development and wide application of information technology, the number and complexity of information systems have greatly increased, and people have higher requirements for access to information systems, such as unified user identity verification, unified access authority allocation, and unified behavior audit operations. . [0003] In some secret-related units or large enterprises, a platform for secure access to intranet resources has be...

AI Technical Summary

Problems solved by technology

[0004] However, most secure access platforms only realize the secure access function of terminals accessing intranet resources. Terminal access behaviors and access rights are controlled separately by each system, and functions such as unified logical control of terminal access behaviors, unified distribution of permissions, and unified auditing of operations are not realized. It cannot recognize the remote desktop commands and the operation commands of the user's own interface system, but can only recognize the text commands such as ftp, telnet, ssh, etc. that control the controllable programs of the application layer, which brings inconvenience to the system.

Images