Network service security access method, terminal, system and readable storage medium

Abstract

The invention relates to the technical field of information security, in particular to a local area network-based network service security access method, terminal and system and a readable storage medium. The network service security access method comprises the steps of monitoring a processing event of network communication data based on a local area network, pausing execution of the processing event, and analyzing identity information of a processing terminal corresponding to the processing event according to an MAC frame of the network communication data, if the processing terminal is determined to be a preset terminal capable of accessing a specific network service according to the identity information, obtaining a shared key of the processing terminal, calculating randomized new identity information according to a preset calculation method according to the shared key and the identity information, and replacing the identity information with the new identity information, and enablingthe network communication data to carry the new identity information to continue to execute the network communication data processing event, so as to hide the specific network service which should bedisclosed for other users except a preset specific network service visitor, thereby achieving the purpose of securely accessing the specific network service.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a LAN-based network service security access method, terminal, system and computer-readable storage medium. Background technique [0002] In a local area network with high security requirements or special application scenarios, one or a part of the network nodes usually provide specific network services to other nodes that meet the requirements. For example, within an enterprise, only one computer in a certain department’s LAN provides data download services, and only computers on the network with download permissions can access the service; An export computer has the authority to access other regional networks, and it needs to summarize various monitoring data in the production environment in this region and transmit them to other regions. Therefore, the export computer needs to open a data service port in the internal network to allow the responsible monitor...

AI Technical Summary

Problems solved by technology

On the other hand, this scheme to change the entire network topology is relatively complicated, which affects both the stability of the network and the efficiency of network services

And the beneficial effect 3 of its patent is described: "Users in the intranet can still use the static IP address to access specific terminals such as network printers and servers in the original way, while ensuring network security, it improves the intranet access to specific terminals. Access efficiency", as can be seen from the patent's description of its own beneficial effects, in this solution, access to specific network services provided by specific terminals is still more inclined to use static IP addresses to improve access efficiency, and there is no True Hide Protects ISPs

Images