An identity authentication and data backup system

Abstract

The present invention discloses an identity authentication and data backup system, which relates to the field of big data technology, and comprises an identity authentication mutual trust module, an access module and an authorization module. The output end of the access module is connected to a platform display module, the output end of the access module is connected to an organization management module, the output end of the access module is connected to a user management module, the output end of the access module is connected to a terminal management module, the output end of the access module is connected to a software management module, the output end of the access module is connected to a peripheral management module, and the output end of the access module is connected to a platform monitoring module. The identity authentication and data backup system is based on the identity authentication mutual trust module, combined with platform access and authorization modules, to complete the integration of platform display, organization management, user management, terminal management, software management, peripheral management, platform monitoring, domain policy management, client and access management functions.

Description

Technical Field

[0001] The present invention relates to the field of big data technology, and in particular to an identity authentication and data backup system. Background Art

[0002] Data sets with large capacity, multiple types, fast access speed and high application value were first applied in the IT industry. They are now rapidly developing into a new generation of information technology and service formats that collect, store and analyze huge amounts of data from scattered sources and in various formats, thereby discovering new knowledge, creating new value and improving new capabilities. Big data must adopt a distributed architecture to conduct distributed data mining on massive data, so it must rely on distributed processing, distributed databases, cloud storage and virtualization technologies of cloud computing.

[0003] The existing technology has the following problems:

[0004] Today's identity authentication and data backup systems have a single effect in use and low practical effect. Summary of the invention

[0005] The present invention provides an identity authentication and data backup system to solve the problems raised in the above background technology.

[0006] In order to solve the above technical problems, the technical solution adopted by the present invention is: an identity authentication and data backup system, including an identity authentication mutual trust module, an access module and an authorization module, the output end of the access module is connected to the platform display module, the output end of the access module is connected to the organization management module, the output end of the access module is connected to the user management module, the output end of the access module is connected to the terminal management module, the output end of the access module is connected to the software management module, the output end of the access module is connected to the peripheral management module, the output end of the access module is connected to the platform monitoring module, the output end of the access module is connected to the domain policy management module, the output end of the access module is connected to the client module, and the output end of the access module is connected to the access management module.

[0007] The platform display module uses a variety of visual charts to display the overall situation of the platform assets, supports the display of alarm information and task information, and realizes a macro understanding of the overall operation of the platform. By displaying the traffic and network speed information of the platform server, it is convenient to grasp the network load of the server environment and improve the stability and reliability of the platform; and provides the ability to export user online time and terminal information online time information, which is convenient for relevant personnel to count and analyze; based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall function improvement as required;

[0008] The organization management module provides the capabilities of organizational structure management, organizational personnel management, and organizational terminal binding, and realizes addition, deletion, modification, and query. It supports binding and associating terminal users, domain policies, terminal information, and organizational information, and realizes unified management based on organizational dimensions, which facilitates statistical analysis and management based on organizational dimensions; based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, completes integration and overall functional improvement as required;

[0009] The user management module provides terminal user addition, deletion, modification and query, terminal user grouping, and terminal user information import and export, thereby achieving unified management of terminal users on the platform. Supports enabling and disabling, and status marking operations for abnormal terminal users, which helps administrators to grasp terminal user status information, promptly clean up or disable terminal accounts that are not frequently used or pose risks, and improve the security of terminal use. It also supports addition, deletion, modification and permission management of platform administrator accounts, improving the security of platform management. It also provides the ability to associate terminal users with login terminals, so that one account can log in on multiple specified terminals, improving the flexibility and security of terminal account use. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall functional improvement as required;

[0010] The terminal management module provides terminal addition, deletion, modification and query, and viewing of basic terminal information (system name, IP address, offline status, activation status), and terminal hardware information (network card information, memory information), which helps to uniformly manage and maintain the terminal. It supports terminal operation and maintenance management operations, including terminal shutdown and restart, and remote operation and maintenance capabilities. It also supports viewing the user list information associated with the terminal, which helps administrators view the list of associated personnel of abnormal terminals, so as to quickly locate the cause of the abnormality. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall functional improvement as required;

[0011] The software management module supports uploading software packages to the platform through file upload, and the terminal can download the required files according to the software address information. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, the integration and overall function improvement are completed as required;

[0012] The peripheral management module provides the ability to manage the blacklist and whitelist of USB flash drives, including the ability to add and remove USB flash drive devices from the blacklist and whitelist; it supports viewing the USB flash drive information in the blacklist and whitelist, including the device name and manufacturer information. It also supports the permission control of the read and write permissions of the USB flash drive through policies, which can greatly improve the security of the system and terminals. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, the integration and overall function improvement are completed as required;

[0013] The platform monitoring module provides platform-related monitoring capabilities, including alarm threshold configuration for terminals, users, and platform servers; provides terminal abnormality monitoring capabilities. When the terminal IP address changes or the terminal online time does not meet the rules, a corresponding type of alarm will be generated so that the administrator can locate the abnormal terminal for analysis and processing; provides user abnormality monitoring capabilities, such as multiple login failures or long periods of no login triggering user abnormality alarms to improve user security; provides server monitoring capabilities, which can display CPU and memory usage rates so that operation and maintenance personnel can promptly troubleshoot server failures and improve the stability and reliability of the platform. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall functional improvement as required;

[0014] The domain policy management module takes the domain terminals under the organization as the object, and establishes a domain policy library by adding, deleting, modifying and checking policies for the desktop personalization, power parameters, network, and peripheral management operating system configuration items. By uniformly configuring domain policies in the domain policy library and supporting the formulation of different domain policies for different organizations, the autonomous management and control capabilities and operational convenience of the domain terminals are improved. It also provides message push capabilities, and realizes unified message notification and management capabilities by writing unified messages on the platform and sending them to designated objects. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, the integration and overall functional improvement are completed as required.

[0015] The access module specifically includes the procurement of an identity authentication mutual trust module, which is used to achieve mutual trust between the domain control system and AD (including domain trust and account password trust).

[0016] The procurement of the identity authentication mutual trust module realizes mutual trust with the existing AD domain. The domain control system forwards the identity authentication request sent by the non-autonomous controllable terminal agent to the AD domain for verification, which specifically includes domain trust and account password trust. It mainly includes user data storage, authentication information processing, user data synchronization and client authentication. 1) User data storage: store AD user data for policy management; 2) Authentication information processing: specifically includes initial ticket request module, service ticket request, data storage; 3) User data synchronization: used to synchronize user data; 4) Client authentication: used to initiate user authentication requests and verify the server and authentication results.

[0017] The platform display module, organization management module, user management module, terminal management module, software management module, peripheral management module, platform monitoring module, domain policy management module, client module, and access management module integration requirements are: based on the improved functions, complete the integration with the 4A platform, and synchronize the organizational structure and user information from 4A.

[0018] Bidders are required to provide deployment architecture diagrams that meet security, functionality, performance and compatibility requirements.

[0019] The product application of this project will be deployed in the environment specified by the tenderer. The software application can be deployed independently without license restrictions or usage time restrictions.

[0020] (1) Strengthen the network security protection of this system in accordance with the principle of "simultaneous planning, simultaneous construction, and simultaneous commissioning" to ensure that no major or above information security incidents occur, which is the bottom line of network security protection for the construction and operation of this system;

[0021] (2) It is necessary to meet the relevant requirements of the "Technical Specifications for Security Protection of Electric Power Monitoring System of China Southern Power Grid", "China Southern Power Grid Network Security Compliance Library", "China Southern Power Grid Network Security Deployment Typical Design Plan", "China Southern Power Grid IT Mainstream Equipment Security Baseline Technical Specifications", "China Southern Power Grid Confidential Matters Definition Scope Table" (China Southern Power Grid Office

[2016] No. 13), and "China Southern Power Grid Data Sharing and Opening Guidance Opinions";

[0022] (3) Synchronize organization and account information through the 4A platform;

[0023] (4) After the system is built, carry out the system network security assessment and information system security level assessment and filing work in accordance with the requirements of the state and Southern Power Grid;

[0024] Identity Authentication:

[0025] 1) Identity authentication and login should meet security requirements.

[0026] 2) It should be able to meet the relevant requirements of the security level protection of the State Grid Corporation of China.

[0027] Access Control:

[0028] 1) The authorized subject configures the access control policy and strictly limits the access rights of the default account. The default account should not be a common administrator account such as admin, supadmin, or root.

[0029] 2) Strict permission control should be implemented on the access rights of different users, privileged account permissions should be separated, and administrator accounts should not be involved in business processes.

[0030] Security Audit:

[0031] 1) The application system log audit function should be enabled, and the audit log content should at least include the following items: (1) user login, logout, and failed login logs.

[0032] (2) Administrator authorization operation log.

[0033] (3) Create, delete (log out) user operation logs.

[0034] (4) Important business operations.

[0035] 2) Log records should include: subject, object, event type, date and time, description, and results.

[0036] 3) Log records should be protected, and unauthorized deletion or modification of log records is prohibited. Log records should be retained for at least six months.

[0037] Communications Integrity:

[0038] 1) Use checksum technology to ensure data integrity during communication.

[0039] 2) Support https access.

[0040] Communication confidentiality:

[0041] 1) Before the communicating parties establish a connection, the application system uses cryptographic technology to perform session initialization verification.

[0042] 2) Sensitive information should be encrypted using an encryption mechanism before transmission.

[0043] Software Fault Tolerance:

[0044] 1) Provide data validity verification function to ensure that the data format or length input through the human-machine interface or through the communication interface meets the system setting requirements.

[0045] 2) It should have a file upload whitelist filtering function to prohibit uploading asp, jsp, exe, vbs, and com type files.

[0046] Resource Control:

[0047] 1) It should have the function of automatically ending the session when idle timeout occurs.

[0048] 2) The maximum number of concurrent session connections should be limited.

[0049] 3) The number of multiple concurrent sessions to a single account should be limited.

[0050] Data Confidentiality:

[0051] Encryption or other protection measures should be used to ensure the confidentiality of sensitive supplier storage in application systems.

[0052] Code Quality:

[0053] 1) Web directory access permissions should be strictly restricted to avoid path traversal attacks.

[0054] 2) When providing the download function, it is necessary to strictly limit the path for users to download files to prevent users from illegally downloading other files of the application system.

[0055] Backstage security:

[0056] 1) All management or operation pages require login authentication to prevent malicious attackers from performing illegal operations by bypassing login authentication.

[0057] 2) The access source of the background should be restricted, and the control granularity should be at the IP and port level.

[0058] 3) For existing application releases, the background management page service port should be separated from the application system page service port.

[0059] Page tamper-proof:

[0060] Web pages should be protected from malicious tampering.

[0061] Non-repudiation:

[0062] 1) It should have the function of providing data origin evidence to the data originator or recipient upon request;

[0063] 2) It should have the function of providing evidence of data receipt to the data originator or recipient upon request.

[0064] Vulnerability correction:

[0065] The security requirements of China Southern Power Grid Corporation and the Digital Research Institute must be fully followed, and all vulnerabilities found in the scan must be rectified.

[0066] Due to the adoption of the above technical solution, the present invention has the following technical advances compared with the prior art:

[0067] The present invention provides an identity authentication and data backup system, which is based on an identity authentication mutual trust module and is combined with a platform access and authorization module to complete the integration of platform presentation, organization management, user management, terminal management, software management, peripheral management, platform monitoring, domain policy management, client, and access management functions. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] Figure 1 It is a schematic diagram of the structure of the present invention. DETAILED DESCRIPTION

[0069] The present invention is further described in detail below in conjunction with embodiments:

[0070] Example 1

[0071] like Figure 1As shown, the present invention provides an identity authentication and data backup system, including an identity authentication mutual trust module, an access module and an authorization module, the output end of the access module is connected to a platform display module, the output end of the access module is connected to an organization management module, the output end of the access module is connected to a user management module, the output end of the access module is connected to a terminal management module, the output end of the access module is connected to a software management module, the output end of the access module is connected to a peripheral management module, the output end of the access module is connected to a platform monitoring module, the output end of the access module is connected to a domain policy management module, the output end of the access module is connected to a client module, and the output end of the access module is connected to an access management module.

[0072] The platform display module uses a variety of visual charts to display the overall situation of the platform assets, supports the display of alarm information and task information, and realizes a macro understanding of the overall operation of the platform. By displaying the traffic and network speed information of the platform server, it is convenient to grasp the network load of the server environment and improve the stability and reliability of the platform; and provides the ability to export user online time and terminal information online time information, which is convenient for relevant personnel to count and analyze; based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall function improvement as required;

[0073] The organization management module provides the capabilities of organizational structure management, organizational personnel management, and organizational terminal binding, and realizes addition, deletion, modification, and query. It supports binding and associating terminal users, domain policies, terminal information, and organizational information, and realizes unified management based on organizational dimensions, which facilitates statistical analysis and management based on organizational dimensions; based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, completes integration and overall functional improvement as required;

[0074] The user management module provides terminal user addition, deletion, modification and query, terminal user grouping, and terminal user information import and export, thereby achieving unified management of terminal users on the platform. Supports enabling and disabling, and status marking operations for abnormal terminal users, which helps administrators to grasp terminal user status information, promptly clean up or disable terminal accounts that are not frequently used or pose risks, and improve the security of terminal use. It also supports addition, deletion, modification and permission management of platform administrator accounts, improving the security of platform management. It also provides the ability to associate terminal users with login terminals, so that one account can log in on multiple specified terminals, improving the flexibility and security of terminal account use. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall functional improvement as required;

[0075] The terminal management module provides terminal addition, deletion, modification and query, and viewing of basic terminal information (system name, IP address, offline status, activation status), and terminal hardware information (network card information, memory information), which helps to uniformly manage and maintain the terminal. It supports terminal operation and maintenance management operations, including terminal shutdown and restart, and remote operation and maintenance capabilities. It also supports viewing the user list information associated with the terminal, which helps administrators view the list of associated personnel of abnormal terminals, so as to quickly locate the cause of the abnormality. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall functional improvement as required;

[0076] The software management module supports uploading software packages to the platform through file upload, and the terminal can download the required files according to the software address information. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, the integration and overall function improvement are completed as required;

[0077] The peripheral management module provides the ability to manage the blacklist and whitelist of USB flash drives, including the ability to add and remove USB flash drive devices from the blacklist and whitelist; it supports viewing the USB flash drive information in the blacklist and whitelist, including the device name and manufacturer information. It also supports the permission control of the read and write permissions of the USB flash drive through policies, which can greatly improve the security of the system and terminals. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, the integration and overall function improvement are completed as required;

[0078] The platform monitoring module provides platform-related monitoring capabilities, including alarm threshold configuration for terminals, users, and platform servers; provides terminal abnormality monitoring capabilities. When the terminal IP address changes or the terminal online time does not meet the rules, a corresponding type of alarm will be generated so that the administrator can locate the abnormal terminal for analysis and processing; provides user abnormality monitoring capabilities, such as multiple login failures or long periods of no login triggering user abnormality alarms to improve user security; provides server monitoring capabilities, which can display CPU and memory usage rates so that operation and maintenance personnel can promptly troubleshoot server failures and improve the stability and reliability of the platform. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, complete the integration and overall functional improvement as required;

[0079] The domain policy management module takes the domain terminals under the organization as the object, and establishes a domain policy library by adding, deleting, modifying and checking policies for the desktop personalization, power parameters, network, and peripheral management operating system configuration items. By uniformly configuring domain policies in the domain policy library and supporting the formulation of different domain policies for different organizations, the autonomous management and control capabilities and operational convenience of the domain terminals are improved. It also provides message push capabilities, and realizes unified message notification and management capabilities by writing unified messages on the platform and sending them to designated objects. Based on the system functions and overall design of the tenderer, combined with the identity authentication mutual trust module, the integration and overall functional improvement are completed as required.

[0080] The access module specifically includes the procurement of an identity authentication mutual trust module, which is used to achieve mutual trust between the domain control system and AD (including domain trust and account password trust).

[0081] The procurement of the identity authentication mutual trust module realizes mutual trust with the existing AD domain. The domain control system forwards the identity authentication request sent by the non-autonomous controllable terminal agent to the AD domain for verification, which specifically includes domain trust and account password trust. It mainly includes user data storage, authentication information processing, user data synchronization and client authentication. 1) User data storage: store AD user data for policy management; 2) Authentication information processing: specifically includes initial ticket request module, service ticket request, data storage; 3) User data synchronization: used to synchronize user data; 4) Client authentication: used to initiate user authentication requests and verify the server and authentication results.

[0082] The platform display module, organization management module, user management module, terminal management module, software management module, peripheral management module, platform monitoring module, domain policy management module, client module, and access management module integration requirements are: based on the improved functions, complete the integration with the 4A platform, and synchronize the organizational structure and user information from 4A.

[0083] Bidders are required to provide deployment architecture diagrams that meet security, functionality, performance and compatibility requirements.

[0084] The product application of this project will be deployed in the environment specified by the tenderer. The software application can be deployed independently without license restrictions or usage time restrictions.

[0085] (1) Strengthen the network security protection of this system in accordance with the principle of "simultaneous planning, simultaneous construction, and simultaneous commissioning" to ensure that no major or above information security incidents occur, which is the bottom line of network security protection for the construction and operation of this system;

[0086] (2) It is necessary to meet the relevant requirements of the "Technical Specifications for Security Protection of Electric Power Monitoring System of China Southern Power Grid", "China Southern Power Grid Network Security Compliance Library", "China Southern Power Grid Network Security Deployment Typical Design Plan", "China Southern Power Grid IT Mainstream Equipment Security Baseline Technical Specifications", "China Southern Power Grid Confidential Matters Definition Scope Table" (China Southern Power Grid Office

[2016] No. 13), and "China Southern Power Grid Data Sharing and Opening Guidance Opinions";

[0087] (3) Synchronize organization and account information through the 4A platform;

[0088] (4) After the system is built, carry out the system network security assessment and information system security level assessment and filing work in accordance with the requirements of the state and Southern Power Grid;

[0089] Identity Authentication:

[0090] 1) Identity authentication and login should meet security requirements.

[0091] 2) It should be able to meet the relevant requirements of the security level protection of the State Grid Corporation of China.

[0092] Access Control:

[0093] 1) The authorized subject configures the access control policy and strictly limits the access rights of the default account. The default account should not be a common administrator account such as admin, supadmin, or root.

[0094] 2) Strict permission control should be implemented on the access rights of different users, privileged account permissions should be separated, and administrator accounts should not be involved in business processes.

[0095] Security Audit:

[0096] 1) The application system log audit function should be enabled, and the audit log content should at least include the following items: (1) user login, logout, and failed login logs.

[0097] (2) Administrator authorization operation log.

[0098] (3) Create, delete (log out) user operation logs.

[0099] (4) Important business operations.

[0100] 2) Log records should include: subject, object, event type, date and time, description, and results.

[0101] 3) Log records should be protected, and unauthorized deletion or modification of log records is prohibited. Log records should be retained for at least six months.

[0102] Communications Integrity:

[0103] 1) Use checksum technology to ensure data integrity during communication.

[0104] 2) Support https access.

[0105] Communication confidentiality:

[0106] 1) Before the communicating parties establish a connection, the application system uses cryptographic technology to perform session initialization verification.

[0107] 2) Sensitive information should be encrypted using an encryption mechanism before transmission.

[0108] Software Fault Tolerance:

[0109] 1) Provide data validity verification function to ensure that the data format or length input through the human-machine interface or through the communication interface meets the system setting requirements.

[0110] 2) It should have a file upload whitelist filtering function to prohibit uploading asp, jsp, exe, vbs, and com type files.

[0111] Resource Control:

[0112] 1) It should have the function of automatically ending the session when idle timeout occurs.

[0113] 2) The maximum number of concurrent session connections should be limited.

[0114] 3) The number of multiple concurrent sessions to a single account should be limited.

[0115] Data Confidentiality:

[0116] Encryption or other protection measures should be used to ensure the confidentiality of sensitive supplier storage in application systems.

[0117] Code Quality:

[0118] 1) Web directory access permissions should be strictly restricted to avoid path traversal attacks.

[0119] 2) When providing the download function, it is necessary to strictly limit the path for users to download files to prevent users from illegally downloading other files of the application system.

[0120] Backstage security:

[0121] 1) All management or operation pages require login authentication to prevent malicious attackers from performing illegal operations by bypassing login authentication.

[0122] 2) The access source of the background should be restricted, and the control granularity should be at the IP and port level.

[0123] 3) For existing application releases, the background management page service port should be separated from the application system page service port.

[0124] Page tamper-proof:

[0125] Web pages should be protected from malicious tampering.

[0126] Non-repudiation:

[0127] 1) It should have the function of providing data origin evidence to the data originator or recipient upon request;

[0128] 2) It should have the function of providing evidence of data receipt to the data originator or recipient upon request.

[0129] Vulnerability correction:

[0130] The security requirements of China Southern Power Grid Corporation and the Digital Research Institute should be fully followed, and all the vulnerabilities found in the scan must be rectified.

[0131] The following is a detailed description of the working principle of the identity authentication and data backup system.

[0132] like Figure 1 As shown, based on the identity authentication mutual trust module, combined with the platform access and authorization modules, the platform display, organization management, user management, terminal management, software management, peripheral management, platform monitoring, domain policy management, client, and access management functions are integrated.

[0133] The above generally describes the present invention in detail, but it is obvious to a person skilled in the art that some modifications or improvements can be made to the present invention. Therefore, modifications or improvements that do not depart from the spirit of the present invention are within the scope of protection of the present invention.

Claims

1. An identity authentication and data backup system, comprising an identity authentication mutual trust module, an access module and an authorization module, characterized in that: The output end of the access module is connected to the platform display module, the output end of the access module is connected to the organization management module, the output end of the access module is connected to the user management module, the output end of the access module is connected to the terminal management module, the output end of the access module is connected to the software management module, the output end of the access module is connected to the peripheral management module, the output end of the access module is connected to the platform monitoring module, the output end of the access module is connected to the domain policy management module, the output end of the access module is connected to the client module, and the output end of the access module is connected to the access management module; The platform display module uses a variety of visual charts to display the overall situation of platform assets, supports the display of alarm information and task information, and realizes a macro understanding of the overall operation of the platform; by displaying the flow and network speed information of the platform server, it is convenient to grasp the network load of the server environment and improve the stability and reliability of the platform; and provides the ability to export user online time and terminal information online time information, which is convenient for relevant personnel to count and analyze; The organization management module provides the capabilities of organization structure management, organization personnel management, and organization terminal binding to achieve addition, deletion, modification, and query; Supports binding and associating terminal users, domain policies, terminal information and organizational information, realizing unified management based on organizational dimensions, and facilitating statistical analysis and management based on organizational dimensions; The user management module provides terminal user addition, deletion, modification, query, terminal user grouping, and terminal user information import and export, thereby realizing unified management of terminal users on the platform; supports enabling and disabling, and status marking operations for abnormal terminal users, which helps administrators to grasp terminal user status information, timely clean up or disable terminal accounts that are not frequently used or have risks, and improve the security of terminal use; it also supports addition, deletion, modification, query and authority management of platform administrator accounts, and improves the security of platform management; it also provides the ability to associate terminal users with log-in terminals, so that one account can log in to multiple specified terminals, and improve the flexibility and security of terminal account use; The terminal management module provides terminal addition, deletion, modification and query, and viewing of terminal basic information and terminal hardware information, thereby facilitating unified management and maintenance of terminals and supporting terminal operation and maintenance management operations, including terminal shutdown and restart, and remote operation and maintenance capabilities; It also supports viewing the user list information associated with the terminal, which helps administrators view the list of associated personnel of abnormal terminals, so as to quickly locate the cause of the abnormality; The software management module supports uploading software packages to the platform by uploading files on the platform, and the terminal automatically downloads the required files according to the software address information; The peripheral management module provides the ability to manage the blacklist and whitelist of USB flash drives, including the ability to add and remove USB flash drive devices from the blacklist and whitelist; supports viewing the USB flash drive information in the blacklist and whitelist, including device name and manufacturer information; and also supports permission control of the read and write permissions of USB flash drives through policies, which can greatly improve the security of the system and terminals; The platform monitoring module provides platform-related monitoring capabilities, including alarm threshold configuration for terminals, users, and platform servers; Provides terminal abnormality monitoring capabilities. When the terminal IP address changes or the terminal online time does not meet the rules, a corresponding type of alarm will be generated so that the administrator can locate the abnormal terminal for analysis and processing; Provides user abnormality monitoring capabilities, such as multiple login failures or long periods of inactivity triggering user abnormality alarms, to improve user safety; provides server monitoring capabilities, which can display CPU and memory usage rates, so that operation and maintenance personnel can promptly troubleshoot server failures and improve platform stability and reliability; The domain policy management module takes the domain terminals under the organization as the object, and establishes a domain policy library by adding, deleting, modifying and checking policies for their desktop personalization, power parameters, network, and peripheral control operating system configuration items; by uniformly configuring domain policies in the domain policy library and supporting the formulation of different domain policies for different organizations, the autonomous control capabilities and operational convenience of the domain terminals are improved; it also provides message push capabilities, and realizes unified message notification and management capabilities by writing unified messages on the platform and sending the messages to designated objects.

Images