Terminal equipment maintenance method and system based on domestic CPU and operating system

Abstract

The present invention discloses a terminal equipment maintenance method and system based on a domestic CPU and operating system, which belongs to the field of terminal equipment inspection and repair technology. The technical problem to be solved is how to perform security inspection and repair on a large number of terminals. The method includes the following steps: for the operating system of the terminal equipment to be inspected, a corresponding security inspection strategy is configured, the security inspection strategy includes all inspection items, security inspection details of each inspection item, and repair and reinforcement functions of each inspection item; security inspection is performed item by item on the terminal equipment locally based on the security inspection details, and the abnormal inspection items in the inspection results are prompted to the user; for abnormal inspection items, whether to perform repair and reinforcement is determined based on the user's choice; the abnormal inspection items that the user decides to perform repair and reinforcement are used as reinforcement items, and the repair and reinforcement functions corresponding to the reinforcement items are called to repair and reinforce the reinforcement items, and the execution results are prompted to the user.

Description

Technical Field

[0001] The present invention relates to the technical field of terminal equipment inspection and repair, and in particular to a terminal equipment inspection and repair method and system based on a domestically produced CPU and operating system. Background Art

[0002] With the development of network technology, various network security incidents emerge in an endless stream. The expansion of network scale has led to more complex configuration of network element equipment parameters and policies, which is prone to parameter mismatch or policy loopholes, resulting in equipment entering the network and operating with problems, increasing the security threats of illegal intrusion and information leakage, and reducing the reliability of network operation. In order to ensure the security of the operating system, it is often necessary to perform security checks on the operating system in the terminal; through security checks, security vulnerabilities in the operating system are detected, and security check items are repaired and reinforced according to the found security vulnerabilities.

[0003] At present, when performing security checks and repairs, it is necessary to manually execute scripts or other repair methods on the terminal to obtain the execution result data; manually determine whether there are security risks in the operating system of each terminal based on the obtained result data, and obtain the inspection results; manually repair the security check items based on the security check results. Manual participation results in low efficiency of security checks and repairs, and it is impossible to complete security checks and repairs on a large number of terminals.

[0004] Based on the above analysis, how to conduct security checks and repairs on a large number of terminals is a technical problem that needs to be solved. Summary of the invention

[0005] The technical task of the present invention is to address the above deficiencies and provide a terminal equipment maintenance method and system based on a domestic CPU and operating system to solve the technical problem of how to perform security inspections and repairs on a large number of terminals.

[0006] In a first aspect, the terminal device maintenance method based on a domestically produced CPU and an operating system of the present invention is used to perform security inspection and repair on a terminal device equipped with a domestically produced CPU and an operating system, and the method comprises the following steps:

[0007] A security check policy corresponding to the terminal device configuration to be checked, wherein the security check policy includes all check items, security check details for each check item, and a repair and reinforcement function for each check item;

[0008] After the terminal device obtains the corresponding security check policy, it performs security checks on each check item locally based on the security check details, and notifies the user of abnormal check items in the check results;

[0009] For the abnormal inspection items, determining whether to perform repair and reinforcement based on the user's selection;

[0010] The abnormal inspection item that the user decides to repair and reinforce is taken as the reinforcement item, and the repair reinforcement function corresponding to the reinforcement item is called to repair and reinforce the reinforcement item, and the user is informed of the execution result.

[0011] Preferably, the repair and reinforcement function is set with a safety check data standard value and a keyword, wherein the safety check data standard value is used to define the safety standard of the check item and is a data value or a field;

[0012] Calling the repair and reinforcement function corresponding to the reinforcement item to repair and reinforce the reinforcement item includes the following steps:

[0013] Obtaining the current value of the reinforcement item;

[0014] Comparing the current value of the reinforcement item with the corresponding standard value of the security check data;

[0015] If the current value of the reinforcement item is consistent with the corresponding standard value of the security check data, or the current value of the reinforcement item is within the safety range of the corresponding standard value of the security check data, no repair is required;

[0016] If the current value of the reinforcement item is inconsistent with the corresponding security check data standard value, or the current value of the reinforcement item is not within the safety range of the corresponding security check data standard value, the current value of the reinforcement item is further repaired through the repair reinforcement function, and the current value of the reinforcement item is modified to the corresponding security check data standard value.

[0017] Preferably, the execution result includes two situations, namely:

[0018] Case 1: If the execution result of the repair and reinforcement is effective in the operating system, the execution result is that the repair is successful;

[0019] Case 2: If the execution result of the repair and reinforcement is not effective in the operating system, the execution result is repair failure.

[0020] Preferably, before the terminal device obtains the corresponding security check policy, a security check and repair client is deployed on the terminal device and the highest authority of the operating system is obtained. The security check and repair client software is used to obtain, check and repair and reinforce the security configuration information of the operating system based on the security check policy and under the highest authority of the operating system.

[0021] Preferably, the abnormal check items are stored in a basic security check item library, and the reinforcement items are stored in a user security check item library. The basic security check item library and the user security check item library are both configured locally on the terminal device, and the basic security check item library and the user security check item library support update operations on their check items, and the update operations include deleting unnecessary check items, modifying existing check items, and adding new check items.

[0022] In a second aspect, a terminal device maintenance system based on a domestic CPU and an operating system of the present invention is used to execute the terminal device maintenance method based on a domestic CPU and an operating system as described in any one of the first aspects, and to perform security inspection and repair on a terminal device equipped with a domestic CPU and an operating system, and the system comprises:

[0023] A policy configuration module, the policy configuration module is used to configure a corresponding security inspection policy based on the terminal device to be inspected, the security inspection policy including all inspection items, security inspection details of each inspection item, and a repair and reinforcement function for each inspection item;

[0024] A security check and repair client, which is configured on a corresponding terminal device and is used to obtain the highest authority of the operating system, and to obtain, check, repair and reinforce the security configuration information of the operating system based on the security check policy under the highest authority of the operating system;

[0025] A basic security check item library, which is used to store check items and perform update operations on the check items, including deleting unnecessary check items, modifying existing check items, and adding new check items;

[0026] A user security check item library, which stores check items and performs update operations on the check items, wherein the update operations include deleting unnecessary check items, modifying existing check items, and adding new check items;

[0027] The security check and repair client obtains, checks, repairs and hardens the security configuration information of the operating system based on the security check policy, including performing the following operations:

[0028] After obtaining the corresponding security check policy, perform security checks on each check item locally on the terminal device based on the security check details, and inform the user of abnormal check items in the check results;

[0029] For the abnormal inspection items, determining whether to perform repair and reinforcement based on the user's selection;

[0030] The abnormal inspection items that the user decides to perform repair and reinforcement are taken as reinforcement items, and the repair and reinforcement function corresponding to the reinforcement items is called to repair and reinforce the reinforcement items, and the user is notified of the execution result. A security inspection policy is configured, and the security inspection policy corresponds to the terminal device, including all inspection items, security inspection details of each inspection item, and the repair and reinforcement function of each inspection item. The security inspection and repair client is used to perform security inspections on the inspection items one by one locally on the terminal device based on the security inspection details, and the user is notified of the abnormal inspection items in the inspection results;

[0031] The basic security check item library is used to store abnormal check items, and the user security check item library is used to store reinforcement items.

[0032] Preferably, the repair and reinforcement function is set with a safety check data standard value and a keyword, wherein the safety check data standard value is used to define the safety standard of the check item and is a data value or a field;

[0033] The security check and repair client calls the repair and reinforcement function corresponding to the reinforcement item to repair and reinforce the reinforcement item through the following steps:

[0034] Obtaining the current value of the reinforcement item;

[0035] Comparing the current value of the reinforcement item with the corresponding standard value of the security check data;

[0036] If the current value of the reinforcement item is consistent with the corresponding standard value of the security check data, or the current value of the reinforcement item is within the safety range of the corresponding standard value of the security check data, no repair is required;

[0037] If the current value of the reinforcement item is inconsistent with the corresponding security check data standard value, or the current value of the reinforcement item is not within the safety range of the corresponding security check data standard value, the current value of the reinforcement item is further repaired through the repair reinforcement function, and the current value of the reinforcement item is modified to the corresponding security check data standard value.

[0038] Preferably, the execution result includes two situations, namely:

[0039] Case 1: If the execution result of the repair and reinforcement is effective in the operating system, the execution result is that the repair is successful;

[0040] Case 2: If the execution result of the repair and reinforcement is not effective in the operating system, the execution result is repair failure.

[0041] In a third aspect, a device of the present invention includes: at least one memory and at least one processor;

[0042] The at least one memory is used to store a machine-readable program;

[0043] The at least one processor is used to call the machine-readable program to execute any method described in the first aspect.

[0044] In a fourth aspect, the medium of the present invention is a computer-readable medium, on which computer instructions are stored. When the computer instructions are executed by a processor, the processor executes any method described in the first aspect.

[0045] The terminal device security inspection and repair method, system, device and medium of the present invention have the following advantages:

[0046] 1. Introduce security inspection strategies for security inspection items. This security inspection strategy provides a unified data model for general description of inspection items and repair and reinforcement. Based on this security inspection strategy, users are provided with convenient, flexible, and easy-to-use inspection items and repair functions for checkpoint configuration, ensuring the customizability and scalability of security inspections.

[0047] 2. Repair and reinforce abnormal inspection items based on user selection, improving user satisfaction;

[0048] 3. During repair, the standard value of the security check data set in the repair and reinforcement function is compared with the current value of the reinforcement item, and a decision is made based on the comparison result whether to repair. This improves the efficiency and accuracy of terminal security inspections and forms structured detection results, which is conducive to the subsequent result summary and analysis work. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0050] The present invention is further described below in conjunction with the accompanying drawings.

[0051] Figure 1 This is a flowchart of Example 1 for terminal equipment maintenance based on a domestic CPU and operating system. DETAILED DESCRIPTION

[0052] The present invention is further described below in conjunction with the accompanying drawings and specific embodiments so that those skilled in the art can better understand the present invention and implement it. However, the embodiments are not intended to limit the present invention. In the absence of conflict, the embodiments of the present invention and the technical features in the embodiments may be combined with each other.

[0053] The embodiments of the present invention provide a method, system, device and medium for security inspection and repair of terminal equipment, which are used to solve the technical problem of how to perform security inspection and repair on a large number of terminals.

[0054] Embodiment 1:

[0055] The terminal equipment maintenance method based on the domestic CPU and operating system of the present invention is used to perform security inspection and repair on the terminal equipment equipped with the domestic CPU and operating system. The method comprises the following steps:

[0056] S100: Configure a security check policy corresponding to the terminal device to be checked, where the security check policy includes all check items, security check details for each check item, and a repair and reinforcement function for each check item;

[0057] S200, after the terminal device obtains the corresponding security check policy, it performs security checks on each check item locally on the terminal device based on the security check details, and notifies the user of abnormal check items in the check results;

[0058] S300. For abnormal inspection items, decide whether to perform repair and reinforcement based on the user's choice; take the abnormal inspection items that the user decides to perform repair and reinforcement as reinforcement items, call the repair and reinforcement function corresponding to the reinforcement items to repair and reinforce the reinforcement items, and inform the user of the execution result.

[0059] The security check details in this embodiment can be customized by the user based on the established security check standard details according to different operating system types and actual software running environments.

[0060] In this embodiment, the repair and reinforcement function includes the security check standard value of the reinforcement item and the keyword of the reinforcement item. The security check standard value is used to determine whether the reinforcement item is normal, that is, to compare whether the current value of the reinforcement item is consistent with the inspection standard value. If they are consistent, it indicates that the inspection item is normal and no repair is required; otherwise, it indicates that the reinforcement item is abnormal, and the user can choose whether to repair the abnormal item according to the needs. The security check standard value can be a data value or a field.

[0061] Calling the repair and reinforcement function corresponding to the reinforcement item to repair and reinforce the reinforcement item includes the following steps:

[0062] (1) Obtain the current value of the reinforcement item;

[0063] (2) Compare the current value of the reinforcement item with the corresponding standard value of the security inspection data;

[0064] If the current value of the hardening item is consistent with the corresponding standard value of the security check data, or the current value of the hardening item is within the safety range of the corresponding standard value of the security check data, no repair is required;

[0065] If the current value of the reinforcement item is inconsistent with the corresponding security check data standard value, or the current value of the reinforcement item is not within the safety range of the corresponding security check data standard value, the current value of the reinforcement item is further repaired by repairing the reinforcement function, and the current value of the reinforcement item is modified to the corresponding security check data standard value.

[0066] Before performing a security check on the operating system of the terminal device, deploy security check and repair client software on the operating system to be checked; after one or more client operating systems receive the inspection strategy, they automatically perform security checks locally based on the security check data standard values ​​set in the repair and reinforcement function. The security check data standard values ​​can be selected by the user to specify security check items to check the system, and the values ​​of the current security check items of the system to be repaired and reinforced can be obtained through the inspection.

[0067] A specific security check task is performed on each operating system. The specific execution process of this method is as follows: first, the highest authority of the current operating system (root authority or developer authority) needs to be obtained. According to the type of operating system in the domestic environment, conditional compilation technology is used to adapt to the commonly used domestic operating systems, and the security check client software is installed and deployed. After the installation is complete, the client software obtains and checks the security configuration information of the current system under the highest authority of the operating system.

[0068] Security check items can be set by default according to security check standards, or they can be set according to actual conditions in the centralized management platform under different environments. Specifically, due to differences between different operating systems, different files may need to be read for the same security check content, and different reinforcement and repair parameters may need to be set. Different versions of operating systems require different reinforcement functions for the same reinforcement items. When checking and reinforcing the operating system, the highest permissions of the host operating system are involved, such as account lockout, password modification policy check, etc. These operations have high operational security risks. System checks and reinforcement can only be performed by the default root user of the host. If the executing user is not the root user, security checks and repair and reinforcement related operations cannot be performed.

[0069] Choose whether to repair and reinforce the abnormal items according to the inspection results, and select the reinforcement function according to the reinforcement requirements: In actual applications, the security inspection items that need to be reinforced and repaired in the obtained inspection results may contain redundant information, such as spaces, comments, etc. Therefore, the inspection results of the obtained reinforcement items are first preprocessed, and the current value of the items that need to be reinforced is obtained from the configuration file. The reinforcement result is generated by comparing the current value of the reinforcement item with the security inspection standard data contained in the repair reinforcement function: When the current value of the reinforcement item is the same as the security inspection standard value or is within a safe range, it indicates that the reinforcement item is normal, and the value of the reinforcement item is retained; otherwise, the reinforcement item is abnormal, and the user chooses whether to reinforce and repair the item according to the needs. Regardless of whether the user chooses to repair and reinforce the abnormal item, whether the repair result is successful or not, the final result will be recorded and notified to the user.

[0070] Users can establish a basic reinforcement item library in advance according to the operating system security inspection standards, and establish a user security inspection item library based on the basic reinforcement item library according to the actual operation of the operating system in different environments. During the inspection and repair process, abnormal inspection items are stored in the basic reinforcement item library, and reinforcement items are stored in the user security inspection item library. Furthermore, the basic security inspection item library and the user security inspection item library can be updated according to actual needs, such as deleting unnecessary reinforcement items, modifying existing reinforcement items, or adding new reinforcement items.

[0071] In this embodiment, the reinforcement result includes the process of strengthening the reinforcement item, the value of the reinforcement item before reinforcement, and the value after reinforcement. The repair reinforcement method includes verifying whether the reinforcement item has taken effect. If the reinforcement result has taken effect, it prompts that the reinforcement is successful; if not, it prompts that the reinforcement repair has failed.

[0072] For example, the reinforcement value of a security check item before repair is 1, and the security check standard value contained in the security repair function corresponding to the reinforcement item is 2. After reinforcement is performed, if the value of the reinforcement item contained in the reinforcement result after reinforcement is still 1, it indicates that the reinforcement repair of the reinforcement item has failed; if the value of the reinforcement item contained in the reinforcement result after reinforcement is 2, it indicates that the reinforcement of the reinforcement item has been completed normally.

[0073] The security inspection and repair reinforcement method of this embodiment reduces the consumption of resources and time, improves the overall performance of security inspection, can obtain the security status of the operating system in a timely manner, and ensures the continuous and safe operation of the business.

[0074] Embodiment 2:

[0075] The present invention is based on a terminal equipment maintenance system of a domestic CPU and an operating system, comprising a policy configuration module, a security check and repair client, a basic security check item library and a user security check item library, wherein the policy configuration module is used to configure a corresponding security check policy based on the operating system of the terminal equipment to be checked, wherein the security check policy includes all check items, security check details of each check item and a repair and reinforcement function of each check item; the security check and repair client is configured on the corresponding terminal equipment, and is used to obtain the highest authority of the operating system, and is used to obtain, check and repair and reinforce the security configuration information of the operating system under the highest authority of the operating system based on the security check policy; the basic security check item library and the user security check item library are used to store check items and update the check items, and the update operation includes deleting unnecessary check items, modifying existing check items and adding new check items.

[0076] Among them, the security check and repair client obtains, checks, repairs and reinforces the security configuration information of the operating system based on the security check policy, including performing the following operations:

[0077] (1) After obtaining the corresponding security check policy, perform security checks on each check item locally on the terminal device based on the security check details, and inform the user of abnormal check items in the check results;

[0078] (2) for the abnormal inspection items, determining whether to perform repair and reinforcement based on the user's selection;

[0079] (3) The abnormal inspection item that the user decides to perform repair and reinforcement is taken as the reinforcement item, and the repair and reinforcement function corresponding to the reinforcement item is called to repair and reinforce the reinforcement item, and the user is notified of the execution result. A security inspection policy is configured, and the security inspection policy corresponds to the terminal device, including all inspection items, security inspection details of each inspection item, and the repair and reinforcement function of each inspection item. The security inspection and repair client is used to perform security inspections on the inspection items one by one locally on the terminal device based on the security inspection details, and the user is notified of the abnormal inspection items in the inspection results.

[0080] In this embodiment, the basic security check item library is used to store abnormal check items, and the user security check item library is used to store reinforcement items.

[0081] In this embodiment, the repair and reinforcement function includes the security check standard value of the reinforcement item and the keyword of the reinforcement item. The security check standard value is used to determine whether the reinforcement item is normal, that is, to compare whether the current value of the reinforcement item is consistent with the inspection standard value. If they are consistent, it indicates that the inspection item is normal and no repair is required; otherwise, it indicates that the reinforcement item is abnormal, and the user can choose whether to repair the abnormal item according to the needs. The security check standard value can be a data value or a field.

[0082] The inspection items in the inspection policy can be set by default according to the security inspection standards, or they can be set according to the actual situation in the centralized management platform under different environments. Specifically, due to differences between different operating systems, different files may need to be read for the same security inspection content, and different reinforcement and repair parameters may need to be set. Different versions of operating systems require different reinforcement functions for the same reinforcement items. When inspecting and reinforcing the operating system, the highest permissions of the host operating system are involved, such as account locking, password modification policy inspection, etc. These operations have high operational security risks. Inspection and reinforcement of the system can only be performed by the default root user of the host. If the executing user is not the root user, security inspection and repair and reinforcement related operations cannot be performed.

[0083] The system of this embodiment can execute the method disclosed in Embodiment 1.

[0084] Embodiment 3:

[0085] The device of the present invention includes: at least one memory and at least one processor; at least one memory is used to store a machine-readable program; at least one processor is used to call the machine-readable program to execute the method disclosed in Example 1.

[0086] Embodiment 4:

[0087] The medium of the present invention is a computer-readable medium, on which computer instructions are stored, and when the computer instructions are executed by a processor, the processor executes the method disclosed in Embodiment 1. Specifically, a system or device equipped with a storage medium can be provided, on which a software program code for implementing the functions of any of the above embodiments is stored, and a computer (or CPU or MPU) of the system or device reads and executes the program code stored in the storage medium.

[0088] In this case, the program code itself read from the storage medium can realize the function of any one of the above-mentioned embodiments, and thus the program code and the storage medium storing the program code constitute a part of the present invention.

[0089] The storage medium embodiments for providing the program code include a floppy disk, a hard disk, a magneto-optical disk, an optical disk (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), a magnetic tape, a non-volatile memory card, and a ROM. Alternatively, the program code can be downloaded from a server computer by a communication network.

[0090] In addition, it should be clear that the functions of any of the above embodiments can be implemented not only by executing the program code read by the computer, but also by enabling an operating system operating on the computer to complete part or all of the actual operations based on instructions from the program code.

[0091] In addition, it can be understood that the program code read from the storage medium is written to a memory provided in an expansion board inserted into the computer or written to a memory provided in an expansion unit connected to the computer, and then based on the instructions of the program code, a CPU installed on the expansion board or the expansion unit is enabled to perform part or all of the actual operations, thereby realizing the functions of any of the above-mentioned embodiments.

[0092] It should be noted that not all steps and modules in the above-mentioned processes and system structure diagrams are necessary, and some steps or modules can be ignored according to actual needs. The execution order of each step is not fixed and can be adjusted as needed. The system structure described in the above-mentioned embodiments can be a physical structure or a logical structure, that is, some modules may be implemented by the same physical entity, or some modules may be implemented by multiple physical entities, or some components in multiple independent devices may be implemented together.

[0093] In the above embodiments, the hardware unit can be realized by mechanical means or electrical means. For example, a hardware unit can include permanent dedicated circuits or logic (such as special processors, FPGA or ASIC) to complete the corresponding operation. The hardware unit can also include programmable logic or circuits (such as general-purpose processors or other programmable processors), which can be temporarily set by software to complete the corresponding operation. Concrete implementation (mechanical means or dedicated permanent circuits or temporarily set circuits) can be determined based on cost and time considerations.

[0094] The present invention is shown and described in detail above through the accompanying drawings and preferred embodiments. However, the present invention is not limited to these disclosed embodiments. Based on the above multiple embodiments, those skilled in the art can know that the code review methods in the above different embodiments can be combined to obtain more embodiments of the present invention, and these embodiments are also within the protection scope of the present invention.

Claims

1. A terminal equipment maintenance method based on domestically produced CPU and operating system, characterized in that The method is used to perform security inspection and repair on terminal equipment equipped with a domestic CPU and operating system, and the method comprises the following steps: A security check policy corresponding to the terminal device configuration to be checked, wherein the security check policy includes all check items, security check details of each check item, and a repair and reinforcement function for each check item. The repair and reinforcement function is set with a security check data standard value and a keyword. The security check data standard value is used to limit the security standard of the check item, which is a data value or a field; Before the terminal device obtains the corresponding security check policy, a security check and repair client is deployed on the terminal device, and the highest authority of the operating system is obtained. The security check and repair client software is used to obtain, check and repair and reinforce the security configuration information of the operating system based on the security check policy and under the highest authority of the operating system. After the terminal device obtains the corresponding security check policy, a security check is performed on each check item locally on the terminal device based on the security check details, and the user is notified of abnormal check items in the check results; For the abnormal inspection items, determining whether to perform repair and reinforcement based on the user's selection; The abnormal inspection item that the user decides to perform repair and reinforcement is used as a reinforcement item, the repair and reinforcement function corresponding to the reinforcement item is called to repair and reinforce the reinforcement item, and the user is informed of the execution result prompt, the abnormal inspection item is stored in the basic security inspection item library, and the reinforcement item is stored in the user security inspection item library, the basic security inspection item library and the user security inspection item library are both configured locally on the terminal device, and the basic security inspection item library and the user security inspection item library support update operations on their inspection items, and the update operation includes deleting unnecessary inspection items, modifying existing inspection items, and adding new inspection items; Calling the repair and reinforcement function corresponding to the reinforcement item to repair and reinforce the reinforcement item includes the following steps: Obtaining the current value of the reinforcement item; Comparing the current value of the reinforcement item with the corresponding standard value of the security check data; If the current value of the reinforcement item is consistent with the corresponding standard value of the security check data, or the current value of the reinforcement item is within the safety range of the corresponding standard value of the security check data, no repair is required; If the current value of the reinforcement item is inconsistent with the corresponding standard value of the security check data, or the current value of the reinforcement item is not within the safety range of the corresponding standard value of the security check data, the current value of the reinforcement item is further repaired by the repair reinforcement function, and the current value of the reinforcement item is modified to the corresponding standard value of the security check data; The execution results include two situations: Case 1: If the execution result of the repair and reinforcement is effective in the operating system, the execution result is that the repair is successful; Case 2: If the execution result of the repair and reinforcement is not effective in the operating system, the execution result is repair failure.

2. The terminal equipment maintenance system based on domestic CPU and operating system is characterized by The system is used to execute the terminal equipment maintenance method based on the domestic CPU and operating system as claimed in claim 1, and to perform security inspection and repair on the terminal equipment equipped with the domestic CPU and operating system, the system comprising: A policy configuration module, the policy configuration module is used to configure a corresponding security inspection policy based on the terminal device to be inspected, the security inspection policy including all inspection items, security inspection details of each inspection item, and a repair and reinforcement function for each inspection item; A security check and repair client, which is configured on a corresponding terminal device and is used to obtain the highest authority of the operating system, and to obtain, check, repair and reinforce the security configuration information of the operating system based on the security check policy under the highest authority of the operating system; A basic security check item library, which is used to store check items and perform update operations on the check items, including deleting unnecessary check items, modifying existing check items, and adding new check items; A user security check item library, which stores check items and performs update operations on the check items, wherein the update operations include deleting unnecessary check items, modifying existing check items, and adding new check items; The security check and repair client obtains, checks, repairs and hardens the security configuration information of the operating system based on the security check policy, including performing the following operations: After obtaining the corresponding security check policy, perform security checks on each check item locally on the terminal device based on the security check details, and inform the user of abnormal check items in the check results; For the abnormal inspection items, determining whether to perform repair and reinforcement based on the user's selection; The abnormal inspection item that the user decides to repair and reinforce is taken as a reinforcement item, the repair and reinforcement function corresponding to the reinforcement item is called to repair and reinforce the reinforcement item, and the execution result is prompted to the user; The terminal device is configured with a security check policy, the security check policy corresponds to the terminal device, and the security check and repair client is used to perform security checks on each check item locally on the terminal device based on the security check details, and inform the user of abnormal check items in the check results; The basic security check item library is used to store abnormal check items, and the user security check item library is used to store reinforcement items.

3. The terminal equipment maintenance system based on domestic CPU and operating system according to claim 2 is characterized in that The repair and reinforcement function is set with a safety check data standard value and a keyword, wherein the safety check data standard value is used to define the safety standard of the check item and is a data value or a field; The security check and repair client calls the repair and reinforcement function corresponding to the reinforcement item to repair and reinforce the reinforcement item through the following steps: Obtaining the current value of the reinforcement item; Comparing the current value of the reinforcement item with the corresponding standard value of the security check data; If the current value of the reinforcement item is consistent with the corresponding standard value of the security check data, or the current value of the reinforcement item is within the safety range of the corresponding standard value of the security check data, no repair is required; If the current value of the reinforcement item is inconsistent with the corresponding security check data standard value, or the current value of the reinforcement item is not within the safety range of the corresponding security check data standard value, the current value of the reinforcement item is further repaired through the repair reinforcement function, and the current value of the reinforcement item is modified to the corresponding security check data standard value.

4. The terminal equipment maintenance system based on domestic CPU and operating system according to claim 2 or 3 is characterized in that The execution results include two situations: Case 1: If the execution result of the repair and reinforcement is effective in the operating system, the execution result is that the repair is successful; Case 2: If the execution result of the repair and reinforcement is not effective in the operating system, the execution result is repair failure.

5. An electronic device, characterized in that: include: at least one memory and at least one processor; The at least one memory is used to store a machine-readable program; The at least one processor is configured to call the machine-readable program to execute the method of claim 1.

6. A computer-readable medium, characterized in that The computer readable medium stores computer instructions, which, when executed by a processor, cause the processor to perform the method of claim 1 .

Images