Information security protection system and information security protection method for fixed environment

Abstract

An information security protection system and its information security protection method for a fixed environment. The information security protection system includes a delivery server, an audit server and a plurality of fixed hosts. At first, the delivery server sends at least one update file to the audit server. The audit server generates at least one corresponding comparison file based on the update file, and returns the comparison file to the delivery server, and the delivery server compares whether the update file and the comparison file are the same, if the comparison results of the update file and the comparison file are the same , output the update file to each fixed host.

Description

technical field [0001] The invention relates to an information security protection system for a fixed environment and an information security protection method thereof, in particular to an information security protection system and an information security protection method for a fixed environment that can avoid implanting malicious programs from inside. Background technique [0002] Nowadays, for the sake of convenience, people will withdraw or transfer money through fixed ATMs, and such ATMs are also currently targeted by cyber hackers. [0003] Current ATMs are equipped with firewalls or anti-virus software in the system to resist the direct attacks of hackers. However, most of these firewalls or anti-virus software are installed Direct intrusion, but hackers' attack methods are also changing with each passing day. First, hackers will invade the intranet through phishing emails, or hack into the recording system to steal administrator account secrets, or directly steal net...

AI Technical Summary

Problems solved by technology

[0003] Current ATMs are equipped with firewalls or anti-virus software in the system to resist the direct attacks of hackers. However, most of these firewalls or anti-virus software are installed Direct intrusion, but hackers' attack methods are also changing with each passing day. First, hackers will invade the intranet through phishing emails, or hack into the recording system to steal administrator account secrets, or directly steal network packets and analyze account secrets. Finally, use the stolen administrator’s account password to remotely invade the management server, and the intruded management server directly sends a malicious program disguised as an update program to the cash machine, and the cash machine implanted with the malicious program can be hacked cracked by hackers, and allowed to be controlled by hackers for illegal theft

Images