Method and system for network access control

Abstract

The invention discloses a method and system for network access control, and relates to the technical field of network transmission security. When the mobile office terminal is under strict network access control, the network connection status of a terminal is dynamically detected, and the terminal can successfully pass the Web and gateway authentication according to the corresponding detection status. According to the method for network access control, the equipment is more compatible in complex changeful network environments, while the network security of the equipment is ensured, the effectiveness of network access control can be improved, the maintenance work of the security administrator can be reduced, and the support and guarantee can further be provided for the accessible network resources of the equipment.

Description

technical field [0001] The invention relates to the technical field of network transmission security, in particular to a method and system for network access control. Background technique [0002] At present, user terminal equipment is widely used. For example, users browse the Internet and do daily work. Generally, Microsoft operating systems (windows) are installed. These operating systems allow users to install and uninstall any software by themselves, which brings great hidden dangers to system security. Attacked by viruses or Trojan horses hidden in self-installed software, the office system belongs to the business system of the unit, and the data involved is sensitive data of the unit, and the leakage of data will bring security threats. In order to allow users to freely install software and browse the Internet on their own terminal equipment, and to ensure the safety of users when using office systems, a management method for network access control of user terminal eq...

AI Technical Summary

Problems solved by technology

This method is effective when the terminal is in the enterprise intranet (private network) or simple Internet (no need for Web and gateway authentication), but in some complex network (requires Web and gateway authentication) environment, the effect of this method is not will be greatly discounted

For example, in airports and other wireless network environments that require identity authentication, if the mobile security office terminal (notebook) needs to access the website www.abcd.com and its content (this website is an accessible network resource, that is, it is in the network whitelist), it must First access to the airport wireless network, the wireless controller of the network will intercept the HTTP request and redirect to the web authentication page of the network for identity verification, however, due to the strict access restrictions of the white list, this page cannot be displayed, making the mobile security office The normal access of the terminal (notebook) to the website www.abcd.com in the white list is restricted. In this case, the connection between the mobile security office terminal and the server may even fail to be established, which affects the management effect of network access control

Images