Secure access control system and method for network terminal nodes

Abstract

The invention discloses a secure access control system and method for network terminal nodes. A C/S (client/server) architecture is provided between a secure access client and a CA (certificate authority) authentication server, and another C/S architecture is provided between the secure access client and an RADIUS (remote authentication dial-in user service) authentication server; the two C/S architectures are used for user identity authentication and terminal access authentication, respectively. A B/S (browser/server) architecture is provided between a security management client and a security management server and is used mainly for registering and checking user information, setting network access group permissions and controlling and monitoring secure access in real time. The secure access control system and method has the advantages that the access terminals can be subjected to trusted identity authentication, trusted access authentication, terminal proxy authentication, network access permission control and network access state real-time monitoring; a trusted terminal access control system based on identity authentication is achieved and is stable and reliable and is high in authentication efficiency, violations such as NAT (network address translation) and proxy services can be detected and warned accurately, network states of terminal users are monitored and controlled through a web management interface, and the needs of private networks for safety management can be fully met.

Description

technical field [0001] The invention belongs to the technical field of network security management, relates to a security management and control system, in particular to a security access management and control system and method of network terminal nodes. Background technique [0002] At present, the security problem of network border access brought by smart terminals through the use of wireless access points has become increasingly prominent. Arbitrarily set up wireless hotspots that anyone can access, smart terminals without any security measures access e-government, e-taxation and other proprietary networks through wireless hotspots, and access them without control. These behaviors seriously damage the proprietary network The integrity of the border opens the door for malicious intruders and provides them with an easy opportunity. How to effectively control the secure access of network terminals, build a credible network terminal access control system, and prevent illega...

AI Technical Summary

Problems solved by technology

[0002] At present, the security problem of network border access brought by smart terminals through the use of wireless access points has become increasingly prominent.

Images