A reverse access control system and method

Abstract

The invention relates to a reverse access control method. S1. According to the type of the application server operating system, the application server installs a server-side system; S2. The client registration unit extracts the server CPU serial number, and injects the unique ID of the server into the client system to complete the process. Client system registration; S3, make the computer terminal become the computer terminal in the authorized network; S4, the interruption policy setting unit sets the interruption policy, and sends interruption policy information to the interruption policy receiving and pushing unit; S5, pushes it to the client interruption A policy receiving unit; S6, the client interruption policy receiving unit receives the interruption policy information; S7, the client daemon process module performs validity verification. The invention verifies the client daemon process module installed in the computer terminal and the server that is not easy to forge, and prevents the computer terminal in the authorized network from connecting to the external information equipment or the network without authorization through the network interface.

Description

technical field [0001] The present invention relates to the technical field of computer terminal information security in a network, in particular to a reverse access control system and method. Background technique [0002] With the vigorous development of information technology, governments and enterprises are increasingly relying on information systems to handle various tasks. In order to ensure the information security of their units, some governments and enterprises have established local area networks that physically isolate their units from the outside world to prevent internal information systems. Internal information leakage of the unit. However, due to environmental, human and other factors, the information in the authorized network may be transferred to the external network through abnormal network channels, thereby causing great losses to the government or enterprises. [0003] In order to avoid the occurrence of the above situation, the unit generally adopts the ...

AI Technical Summary

Problems solved by technology

[0005] (1) None of the above technologies can prevent computer terminals in the authorized network from connecting to unauthorized devices through network interfaces;

[0006] (2) Network access control technology cannot prevent computer terminals in the authorized network from accessing other networks;

[0007] (3) Use network addressing technology to block network connections. If the fixed network address is leaked and the user actively blocks the connection between the computer terminal and the network address, this technology cannot block the connection between the computer terminal and the Internet;

[0008] (4) Network addressing technology cannot prevent devices in the authorized network from accessing other networks that are not connected to the Internet

Images