No Feedback Security Authentication and Access Control Method

Abstract

The invention relates to the field of information security, and discloses a non-feedback security authentication and access control method. An authentication control system on which the method is based comprises an authenticator, an authentication server, a plurality of clients and a plurality of servers; the clients and the authentication server both have authentication values, the authenticationserver is in a monitoring state, and ports of the servers are acquiescently in a closed state and do not accept access requests; and the clients send authentication messages containing the authentication values to the authentication server through the authenticator, after authentication by the authentication server succeeds, the authentication server informs the servers to execute corresponding service operations, the corresponding ports are opened to allow the clients to access, and meanwhile the authentication values of the clients and the authentication server are both updated. According to the non-feedback security authentication and access control method, the authentication server is adopted to conduct legality authentication on all access requests sent to the servers, and access tothe servers is controlled according to authentication results, so that the conditions that the servers are scanned, detected and accessed illegally are prevented.

Description

technical field [0001] The invention relates to the field of information security, in particular to a non-feedback security authentication and access control method. Background technique [0002] The characteristics of openness, interaction, and decentralization of computer networks have greatly satisfied people's needs for information sharing and information dissemination, but at the same time, they have also brought about increasingly serious network security problems. Existing communication networks often rely on open standard communication protocols (such as TCP), and the content of information is exposed to potential eavesdroppers on the network, making network devices face the danger of large-scale malicious attacks. The network border defense system with the firewall as the core can only meet the general security requirements of informatization construction, and it is difficult to solve the security protection problem of important network equipment. [0003] The prem...

AI Technical Summary

Problems solved by technology

However, the information content of the present invention is exposed in front of potential eavesdroppers on the network, making network equipment face the danger of large-scale malicious attacks

Images