Secure communication method and system of secure server

Abstract

The invention discloses a secure communication method of a secure server. The secure communication method of the secure server comprises the following steps of (1) registering information through an information verification terminal, and binding a user ID and a business system operation terminal internet protocol (IP); (2) checking biological characteristics of a user; (3) registering through the business system operation terminal IP which is bound with the user, and checking the state of the user in the information verification terminal through a proxy server; (4) the business system operation terminal IP accessing the secure server through the proxy server; (5) logging off verification information of the user. The invention further discloses a system which is used for implementing of the communication method, and the system comprises the proxy server, a business system operation terminal, the information verification terminal and the secure server. The business system operation terminal, the information verification terminal and the secure server are respectively connected with the proxy server in a communication mode. The proxy server conducts data forwarding between the business system operation terminal and the secure server, so that the secure server is invisible in the business system operation terminal and illegal operation of the secure server is avoided.

Description

technical field [0001] The invention relates to the technical field of information security, especially related to the communication security of a security server. Background technique [0002] At present, the existing security application system 1 schemes are in the form of figure 1 As shown, the security application system 1 generally directly provides secure password services for the business operation platform 11 in the form of a security server 12, the security server 12 is directly connected to the business operation platform 11, and the security server 12 is directly connected to the business operation platform 11. To send and receive data to each other, security services include such content as identity authentication, data confidentiality, digital signature and signature verification. In this communication mode, as a support for providing cryptographic services externally, the security of the security server 12 is the only key element to ensure the business securit...

AI Technical Summary

Problems solved by technology

In this communication mode, the security server 12 is visible to the business operation platform 11, so there is a possibility that users of the business operation platform 11 or illegal operators attack the security server 12 by illegal means, so that the security of the security server 12 is at great risk. thereby threatening the security application system 1

[0003] In addition, in the security application system 1, there is no related access control technical solution for the users of the business operation platform 11 and the operation terminals of the business operation platform 11, and it may happen that the user accesses beyond the authority or illegal operators illegally access the security server 12. In addition, the security application system 1 lacks an effective control scheme for users and operating terminals, and it is difficult to trace and track problems after they occur.

Images