Safe access method and system of network ports

Abstract

The invention relates to a safe access method and system of network ports. On one hand, a network filtering driver is installed on a server H and used for protecting specified ports on the server, andany IP is refused to access the protected ports under the default condition, so that the unauthorized IP cannot access the protected ports, and the network security risk is reduced; and on the otherhand, a port to be accessed by a trusted IP submitted by an administrator A is transmitted to the network filtering driver on the server H through a man-in-the-middle system M, and then the network filtering driver temporarily permits the specified trusted IP to access the protected network port x for y seconds, so that normal legal user access is not blocked and is not limited by the IP change ofthe administrator A: when the IP of the administrator A changes, the administrator A can access the network port x of the server H as long as accessing the man-in-the-middle system M again. Accordingto the invention, the security of network port access and the convenience of legal user access are improved.

Description

technical field [0001] The invention belongs to the field of information security software, and in particular relates to a method and system for securely accessing network ports. Background technique [0002] A network port is used to identify the connection endpoints between two communication devices. In order to prevent unauthorized access, in general, the network port can be clearly restricted to only trusted IPs, or no one can access it. [0003] There is following shortcoming in prior art: [0004] If the network port is clearly restricted to only trusted IPs, or no one can access it, then legitimate users can only access it when the IP meets the conditions and is trusted, or they cannot access it at all, which will cause inconvenience in accessing. [0005] For example, if an administrator restricts the TCP port 3389 of a certain device to be accessed only by its own IP address 1.2.3.4, then when the administrator's IP changes (such as rerouting to the Internet, IP r...

AI Technical Summary

Problems solved by technology

[0004] If the network port is clearly restricted to only trusted IPs, or no one can access it, then legitimate users can only access it when the IP meets the conditions and is trusted, or they cannot access it at all, which will bring inconvenience to access

[0005] For example, if an administrator restricts the TCP port 3389 of a certain device to be accessed only by its own IP address 1.2.3.4, then when the administrator's IP changes (such as rerouting to the Internet, IP reassignment), the administrator cannot access The device's TCP port 3389 has

Images