Gateway device and visual interaction method for network access control performed by it

Abstract

The invention provides gateway equipment and a network access controlled visualized interaction method executed by the same, wherein the method comprises the following steps that after an access authority inquiry request to a first equipment entity in a network topology structure is received, a network access control rule which corresponds to an internet protocol (IP) address is searched in the network access control rule of the network topology structure which is pre-stored in the gateway equipment according to the IP address of the first equipment entity; the access authority of the first equipment entity is determined according to the rule and is displayed in the network topology structure; and the network access control rule of the first equipment entity is revised according to the revision request of the access authority of the first equipment entity, and the access authority of the first equipment entity which is determined according to the revised network access control rule is displayed in the network topology structure. According to the gateway equipment and the network access controlled visualized interaction method executed by the same, the maintainability of the network access control rule can be effectively improved, so that a user does not need to maintain the complicated and obscure access control rule but can intuitively and randomly revise the network access control rule in topology directly,.

Description

technical field [0001] The present invention relates to the technical field of network security, and more specifically, to a gateway device and a visual interaction method for network access control executed by the gateway device. Background technique [0002] Visualization is a method and technology that uses computer graphics technology to convert data into graphics, display images on the screen, and perform interactive processing. In the field of network security, visual configuration interaction is mostly based on network topology. Configuring on a visualized network topology is obviously more intuitive and more in line with the user's mental model, which simplifies learning and is easy to operate. [0003] figure 1 It is a schematic diagram of visual interaction based on network topology. Such as figure 1 As shown, the local network terminals located in multiple office locations (Office311, Office421, Office417, Office321, and DMZ) are connected to the external Inte...

AI Technical Summary

Problems solved by technology

It can be seen that the transposition of the order of the rules will lead to a complete change of the meaning defined by these rules

The above example only involves two rules, and when the number of rules reaches 100 (which is very common in the actual network environment), the relationship between the rules will be more complicated and not obvious, making it extremely difficult to maintain

[0016] Aiming at the problem of difficult maintenance due to the large number of access control rules existing in the prior art, there is an urgent need for a technology that can improve the maintainability of the rules

Images