Reverse access control system and method

Abstract

The invention relates to a reverse access control method, which comprises the following steps that S1: according to the type of an operating system of an application server, the application server installs a server-side system; S2, a client registration unit extracts a server CPU serial number, and injects a server unique ID into a client system to complete client system registration; S3, a computer terminal becomes a computer terminal in an authorized network; S4, an interrupt strategy setting unit sets an interrupt strategy, and sends interrupt strategy information to an interrupt strategy receiving and pushing unit; S5, the interrupt strategy is pushed to a client interrupt strategy receiving unit; S6, the client interrupt strategy receiving unit receives the interrupt strategy information; and S7, the client daemon process module performs legality verification. Verification is carried out through the client daemon process module installed in the computer terminal and the server which is not easy to forge, and the computer terminal in the authorized network is prevented from being connected to external information equipment or the network in an unauthorized mode through the network interface.

Description

technical field [0001] The invention relates to the technical field of computer terminal information security in a network, in particular to a reverse access control system and method. Background technique [0002] With the vigorous development of information technology, governments and enterprises rely more and more on information systems to handle various tasks. In order to ensure the information security of their units, some governments and enterprises have established LANs that are physically isolated from the outside world to prevent internal information systems. Information leakage within the unit. However, due to environmental, human and other factors, the information in the authorized network may be transferred to the external network through abnormal network channels, thereby causing great losses to the government or enterprises. [0003] In order to avoid the occurrence of the above situation, units generally adopt access control technology to control the network ...

AI Technical Summary

Problems solved by technology

[0005] (1) None of the above technologies can prevent computer terminals in the authorized network from connecting to unauthorized devices through network interfaces;

[0006] (2) Network access control technology cannot prevent computer terminals in the authorized network from accessing other networks;

[0007] (3) Use network addressing technology to block network connections. If the fixed network address is leaked and the user actively blocks the connection between the computer terminal and the network address, this technology cannot block the connection between the computer terminal and the Internet;

[0008] (4) Network addressing technology cannot prevent devices in the authorized network from accessing other networks that are not connected to the Internet

Images