Double authenticated network security system

Abstract

The invention discloses a network security system of a double authenticated mechanism. The network security system comprises an outer network authentication module positioned between an outer network firewall and a first switch, an inner network authentication module positioned between an inner network computer and a second switch, a device authentication server connected with the second switch, and a network management device connected with the first switch. The network management device manages an outer network access permission of a user, a device authentication server stores device information allowed to access an inner network. The firewall is used for preventing Trojan and virus attacks, the outer network authentication module is used for controlling a permission of an inner network user accessing an outer network, and the inner network authentication module is used for controlling the permission of a device applying for the access to the inner network. The double authenticated network security system is rigorous in prevention, convenient to manage and capable of improving the security performance.

Description

technical field [0001] The present invention relates to the field of network technology, in particular to a network security system, in particular to a dual-authentication network security system. Background technique [0002] With the development of computer science and technology, the challenges of information security in network construction and maintenance are becoming more and more severe, especially after 2010, the number of network attacks has increased day by day. And considering the convenience that the Internet brings to our work and life, we cannot abandon the Internet because of choking, so we need a safer management system. Traditional computers are connected to the internal network and external network at the same time. Although the work efficiency is improved, information security is often threatened by external and internal Trojan horses, viruses, and hackers. If the information is leaked or destroyed, it will cause irreparable losses. Existing information s...

AI Technical Summary

Problems solved by technology

[0003] First, the authentication module is not concise and efficient enough, which instead creates obstacles for internal users;

[0004] Second, only restrict external network access but not internal network access, so that hackers can easily enter the internal network and then attack the internal server;

[0005] Third, the attack methods change in multiple stages, and the renovation is fast, and the security policy is updated slowly, resulting in the inability to effectively defend against risks, and it is difficult to carry out comprehensive security protection for the internal network system;

[0006] Fourth, the current network management system restricts the access rights of intranet users to the external network, but does not restrict users' access to the internal network, which leaves loopholes for hacker attacks

Images