A security access method for application system

Abstract

The invention relates to a secure access method of an application system. The method includes the following steps that: the configuration data of a configuration server are set, the identity of the user of a secure terminal is verified through the configuration data; the user sends an encrypted request data packet to a gateway server through the secure terminal; the gateway server decrypts the request data packet, analyzes out the identification code of the secure terminal and the name of the application system which the secure terminal is to access, and calls the configuration server to verify the access authority of the secure terminal to the application system; and the gateway server forwards the decrypted request data packet to the application system and is responsible for encrypting a data packet returned by the application system and returning the encrypted data packet to the secure terminal. According to the secure access method of the application system of the invention, multiple measures are adopted to protect access, namely, terminal authentication, user login, authority verification and data encryption interaction are adopted, so that computers accessing the application system can be effectively restricted, illegal access can be prevented, the security of the application system can be ensured, and the security of data can be ensured.

Description

technical field [0001] The invention relates to the field of data security, in particular to a method for secure access to an application system. Background technique [0002] In today's Internet era, application systems such as ERP, OA, and CRM have formed an indispensable part of enterprise office, but because of the vulnerability of software, leaks occur frequently, and application system security has become a problem of great concern to enterprises. . [0003] Implementation methods in the prior art include restricting access to the IP address of the terminal of the application system, restricting access to the application system requires an account number and a password, and the like. [0004] But, there is following defect in existing method or product: [0005] 1. Only the IP address of the terminal entering the application system is restricted, the identity of the visitor cannot be confirmed, and the IP address is also easily stolen, and the restriction will have g...

AI Technical Summary

Problems solved by technology

[0005] 1. Only the IP address of the terminal entering the application system is restricted, the identity of the visitor cannot be confirmed, and the IP address is easy to be stolen, and the restrictions will have great limitations on the convenience of access

[0006] 2. Due to business needs, many application systems have to expose addresses and ports to the external network, which is easily attacked by hackers

[0007] 3. Only restricting access to the application system requires an account number and password, which will expose the application system. The account number and password are easy to be cracked, and if the application system has loopholes, it is also easy to be attacked or bypass verification and directly enter the application system.

[0008] 4. Many application systems have the function of remembering passwords, which is convenient for users and easy for others to enter the application system

[0009] 5. After the user logs in to the application system, if he leaves the application system for some reason or does not completely exit the application system, it is also prone to hidden dangers of leakage

Images