Method and system for network access control

Abstract

The present invention provides a network access control method and system, which relate to the technical field of network security, including detection of real-time online terminals in the network; performing security audits on real-time online terminals according to the basic database: if the security audit passes, the real-time online terminals are allowed to access access to the network; if the security audit is not passed, the real-time online terminal is authenticated according to the basic database: if the security authentication is passed, the real-time online terminal is allowed to access the network, and the first access authority is set; if the security authentication is not passed, the real-time online terminal is Perform security assessment on the real-time online terminal: if the security assessment passes, the real-time online terminal is allowed to access the network, and the second access authority is set; if the security assessment fails, the real-time online terminal is refused to enter the network. The invention performs multiple verifications on the authenticity of user identities and terminal risks, realizes network access control and obtains access rights, and improves network security.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network access control method and system. Background technique [0002] With the development and integration of computer technology and network communication technology, terminal security management is becoming more and more important for every enterprise. A good terminal security control technology can ensure that the security policy of the enterprise is truly implemented and effectively control various Illegal security incidents, to the greatest extent contain the repeated malicious attacks and damages in the network. At present, in enterprise networks, user terminal computers do not update system patches and virus databases in time, set up proxy servers privately, access external networks privately, and abuse enterprise software to disable behaviors abound. Once a vulnerable user terminal is connected to the network, the It is equivalent to opening the door to pote...

AI Technical Summary

Problems solved by technology

However, because the current data collection method is relatively simple, the amount of collected data is small but not comprehensive enough, which leads to loopholes in network access control and cannot effectively guarantee network security.

Although the traditional way of installing additional agents for data collection increases the amount of collected data, the operation is more complicated, and the increase in equipment also increases the corresponding security risks

Images