Software white list control method based on message authentication

Abstract

The invention discloses a software white list control method based on message authentication, and is a method for realizing software communication white list control by a network based on message authentication. The core thought is as follows: a terminal white list credible base judges whether the message needs to carry an authentication code by combining a message authentication code, a softwarecertificate and a software white list, and verifies filter equipment through the authentication code deployed on the network, thereby realizing the software communication white list control by a transparent network of a user, and effectively controlling unauthorized software and malicious software communication. The defect that the current software communication control mechanism can be easily bypassed by malicious software is remedied, and the security performance of a communication control system is effectively improved; the network communication cannot be influenced in the network, and themalicious software communication can be effectively controlled.

Description

technical field [0001] The invention relates to the basic communication field of a trusted and safe network, in particular to a software white list control method based on message authentication codes on the network. Background technique [0002] With the increasing popularity of computer networks and the continuous emergence of various new technologies and equipment, people can access the Internet anytime and anywhere. While the Internet brings great convenience to people's life, work and study, it also makes network users suffer more than ever before. More cyber attacks and threats. When the Internet was founded, it was designed based on the idea of ​​openness and sharing, and basically did not consider the security of the network. As the core of Internet communication, the TCP / IP protocol family mainly considered the reliability of network interconnection and tried its best to transmit data. The authentication of information sources and the encryption and integrity prote...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the problem that malicious software communication cannot be effectively checked and controlled at present, the present invention proposes a software communication whitelist control method based on a message authentication code, which is a method for realizing a network-to-software communication whitelist control method based on a message authentication code. Its core idea is to combine message authentication codes, software certificates, software whitelists, and terminal whitelist trust bases to judge whether packets need to carry authentication codes, and verify and filter devices through authentication codes deployed on the network to achieve user-transparent network-to-software Communication whitelist control, effective control of unauthorized software and malware communication

Images