Global network access control method based on android device

Abstract

The present invention relates to the technical field of network communication, in particular to an Android device-based global network access control system and method, including a background configuration module list, an authorization module, an automatic interface module, a whitelist writing module, and a DNS resolution and redirection module , a network request analysis module, a network access interception module and a data server. The invention enables the background of the mobile device to automatically obtain the white list and automatically perform network control; at the same time, it supports pan-domain name matching, which greatly reduces the workload and improves the efficiency of background management; instant request for instant analysis solves the performance and efficiency problems of large batches of centralized analysis, It reduces the occupation of system resources, and at the same time completely solves the problem of changing the IP address of the CDN network. Without the intervention of managers, the information security requirements of the global network control of mobile devices are efficiently realized.

Description

technical field [0001] The present invention relates to the technical field of network communication, in particular to a global network access control system and method based on an Android device. Background technique [0002] With the popularization of the mobile Internet, a large number of mobile application usage scenarios have emerged in various industries, and the use of mobile devices is quickly pushed to various industries such as mobile office, mobile government affairs, and smart education. The use of mobile smart terminals can effectively eliminate the limitations of location and time, and greatly improve the work and study efficiency of governments, schools, and enterprises, as well as the convenience of use; at the same time, it also brings many problems, especially in the network use of special equipment , based on the consideration of information security and the prevention of malicious software damage, the demand for network access control of mobile devices is...

AI Technical Summary

Problems solved by technology

[0003] At present, there are two main types of network access control for mobile devices that are mainstream in the market. One is to control the browser to access the website through a dedicated browser. The main defects: 1) only control the dedicated browser, and cannot perform network control on third-party browsers

2) It is impossible to control the web pages embedded in other learning and work applications

The other is to simply implement global restrictions through the iptables rules of the operating system. The main defects: 1) Only ip address rules can be set to control

2) The white list of domain names needs to be converted into ip in advance, which is inefficient, and it is impossible to deal with changing IP addresses such as CDN networks

3) With the increase of the whitelist, the execution efficiency of rule writing is getting lower and lower

4) Pan-domain name resolution is not supported, and background management needs to add a large number of accurate domain name whitelist addresses

Neither of the two solutions can perform safe and effective network control on a large number of distributed mobile devices, and cannot effectively control mobile devices' access to illegal websites.

Images