An information security evaluation method, device and computer based on multi-factor authentication

Abstract

The invention discloses an information security evaluation method, device and computer based on multi-factor authentication. The method includes obtaining and recording the environmental factor information and time stamp of the evaluation target site; comparing the environmental factor information with the preset information to determine whether it can continue; the evaluation personnel log in to the server and compare it with the preset information to determine whether it can continue; the evaluation personnel Check the evaluation target and compare it with the preset value to judge whether it can continue; judge and update the evaluation guide and evidence collection tasks according to the evaluation target object; conduct evaluation and collect and record the evaluation evidence and results; mark the recorded data with on-site environmental factors Encrypted storage after information tag. The device includes acquisition, target comparison, personnel comparison, verification, update, evaluation, processing and other modules. The computer includes a processor, a collection module, a network module, a storage module and an encryption module. The invention has the characteristics of high evaluation efficiency, high authenticity of evidence, and non-repudiation of evaluation data.

Description

technical field [0001] The invention belongs to the technical field of computer security, and in particular relates to an information security evaluation method and device based on multi-factor verification, which has high evaluation efficiency, strong effectiveness of the evaluation method, high authenticity of evaluation evidence, and non-repudiation of evaluation data, and a computer. Background technique [0002] Currently, in the information security on-site evaluation activities, the evaluation personnel need to complete the evaluation content in the evaluation guide book according to the evaluation plan confirmed with the entrusting unit and the evaluation method after the evaluation, and obtain sufficient evaluation evidence. Therefore, the authenticity and non-repudiation of on-site data, as well as the effectiveness of the evaluation method, etc., play a crucial role in the results of the entire evaluation. In the existing technology, the collection of on-site evid...

AI Technical Summary

Problems solved by technology

In the existing technology, the collection of on-site evidence adopts the method of offline recording, and there are no strict management and verification measures for the environment and evaluation devices of the on-site evaluation objects, which may easily lead to incomplete evidence collection data, inconsistencies between on-site evaluation methods and plans, and evidence storage. If the security level is not high, subsequent security issues will often lead to disputes between the evaluation party and the entrusting unit, and may also easily lead to non-standard security evaluation

Images