Method, device and system used for tamper-proofing privilege management

Abstract

The invention discloses a method, device and system used for tamper-proofing privilege management. The method used for tamper-proofing privilege management comprises that a business updating module sends a business updating notification to a privilege management module when receiving a business updating trigger message; the privilege management module instructs a tamper-proofing module to open tamper-proofing privilege management when receiving the business updating notification; after the tamper-proofing module opens the tamper-proofing privilege management, the business updating module carries out the business updating process. According to the invention, the tamper-proofing privilege management function and the business process are combined, the problems that the existing tamper-proofing technology and the business are weakly correlated with each other can be effectively solved, the tamper-proofing privilege and the updating process are reasonably combined, and furthermore a higher-security-level tamper-proofing requirement can be achieved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method, device and system for tamper-proof rights management. Background technique [0002] With the development of Internet technology, WEB applications have become more and more extensive and penetrated into various fields. The internal connection of enterprises has become closer and closer, the value of data has become higher and higher, and the frequent occurrence of network security incidents has led to more and more people and enterprises. Pay more attention to network security, especially WEB application security. Although there are security measures such as firewalls and intrusion detection, the complexity and diversity of WEB application systems lead to endless system vulnerabilities, which are hard to detect, and incidents of hackers intruding and tampering with pages occur from time to time. In response to these situations, the webpage anti-tampering system came ...

AI Technical Summary

Problems solved by technology

[0004] However, the existing anti-tampering technology is isolated from the business in the protection monitoring process and is relatively independent, that is, the anti-tampering technology is weakly related to the business

In the scenario of frequent business updates, the requirements for the close relationship between tamper-proof technology and business cannot be met, and it is increasingly unsuitable for business development needs.

Images