A method and device for securely accessing a mobile phone terminal to an information network

Abstract

The invention discloses a method and device for enabling a mobile phone terminal to safely access an information network, and the method comprises the following steps of importing the user informationallowed to be accessed and mobile phone terminal information into an information verification system, and generating an information verification white list; constructing a one-to-one corresponding legality mapping table for the user, the mobile phone terminal and the user digital certificate, and pre-importing the one-to-one corresponding legality mapping table into a network controller; using the network controller to obtainthe user information and mobile phone terminal information applied for access, and comparing the user information and the mobile phone terminal information applied for access with the information in the generated information verification white list; when the user information applying for access and the mobile phone terminal information exist in the information verification white list, comparing the user applying for access, the mobile phone terminal and the digital certificate with a pre-imported legality mapping table; if yes, allowing the mobile phone terminalto access the information network; otherwise, denying the access. According to the method, the mobile phone terminal can be accessed to the information network safely, efficiently and flexibly.

Description

technical field [0001] The invention relates to a method for a mobile phone terminal to securely access an information network, and a device for realizing the method, belonging to the technical field of network security. Background technique [0002] Information networks usually need to authenticate the identity of users before providing services, and may encrypt and protect subsequent communication data to control that only legitimate users can use relevant resources, services or functions. Using digital certificates is a common security mechanism to solve this problem. By using the digital certificate bound to the user, using the PKI system, VPN technology, etc., the complexity of the user's use can be simplified and the security of identity authentication can be improved. [0003] The mobile terminal obtains various data resources and services through the information network. The number of accesses is large, and the data exchange traffic is large. The information netwo...

AI Technical Summary

Problems solved by technology

Mobile terminals cannot use password modules such as USBKEY;

[0008] 2) When collecting and sending terminal feature information, only the serial number of the digital certificate is sent, and the digital certificate itself is not signed and sent, which has potential security risks;

[0009] 3) There is no real-time query on the validity of the digital certificate, so that the terminal digital certificate can enter the information network even when it expires or is revoked;

[0010] 4) Using fingerprints as user identity authentication is easy to be tampered with by fraudulent use. For example, hand masks can be used to obtain user fingerprint information and then falsify, thus causing security risks

Images