High-security computer network information management system based on data processing

Abstract

The invention relates to a high-security computer network information management system based on data processing, which belongs to the technical field of network information management and comprises a network information management module, and the network information management module comprises a basic operation information module, a server information module, a user information module, a network information resource module and a security module. The high-security computer network information management system based on data processing is composed of a basic operation information module, a server information module, a user information module, a network information resource module and a security module. Data are effectively processed and managed through the basic operation information module, the server information module, the user information module and the network information resource module, the security performance of the computer network information management system is improved through the security module, the influence of viruses on a computer is effectively prevented in the process of using the computer, and the service life of the computer is prolonged. Therefore, the data processing capability of the computer is ensured, and meanwhile key data of the computer is protected.

Description

Technical Field

[0001] The present invention relates to the technical field of network information management, in particular to a high-security computer network information management system based on data processing. Background Art

[0002] A computer network system is a system that uses communication equipment and lines to interconnect multiple computer systems with different geographical locations and independent functions, and uses functional network software to realize resource sharing and information transmission in the network. Through the interconnection of computers, communication between computers is realized, thereby realizing functions such as sharing of information, software and equipment resources between computer systems and collaborative work. Its essential feature is to provide a high degree of sharing of various resources between computers, and realize convenient exchange of information and ideas.

[0003] In recent years, the development of computer networks in my country has provided many conveniences for people's production and life. At the same time, computer networks and big data technologies can effectively process information in multiple industries and fields, so that the trends of industry and even social development can be effectively grasped. However, in the process of information dissemination and processing, there are information leaks, and a lot of information will be illegally used, which seriously affects information security. Therefore, in the process of managing computer network information, it is necessary to ensure information security from the technical and management levels. In the Internet age, computer network information will be transmitted through the network. Data loss is very likely to occur during the transmission process, affecting data security. Therefore, strengthening the security protection of computer network information management is the current key issue. Therefore, a high-security computer network information management system based on data processing is proposed to solve the above problems. Summary of the invention

[0004] In view of the deficiencies in the prior art, the present invention provides a high-security computer network information management system based on data processing, which has the advantages of good security, etc., and solves the problem of poor security of the existing high-security computer network information management system based on data processing.

[0005] To achieve the above object, the present invention provides the following technical solutions: A high-security computer network information management system for data processing, comprising a network information management module, wherein the network information management module comprises a basic operation information module, a server information module, a user information module, a network information resource module and a security module;

[0006] The basic operation information module is bidirectionally electrically connected to the server information module, the server information module is bidirectionally electrically connected to the user information module, the user information module is bidirectionally electrically connected to the network information resource module, and the network information resource module is bidirectionally electrically connected to the security module.

[0007] Furthermore, the basic operation information module includes an information interaction module, a resource sharing module, a collaborative processing module and a computing distribution module.

[0008] Furthermore, the basic operation information module is electrically connected to the information interaction module, the basic operation information module is electrically connected to the resource sharing module, the basic operation information module is electrically connected to the collaborative processing module, and the basic operation information module is electrically connected to the calculation distribution module.

[0009] Furthermore, the network information management module is applied to terminal devices, intermediate devices, network media, hosts, servers, switches and router devices.

[0010] Furthermore, the security module includes a network information antivirus module, an access control module, a data backup module, an information encryption module and a network intrusion detection module, and the functions of the security module include confidentiality, integrity and availability.

[0011] Furthermore, the security module is electrically connected to the network information antivirus module, the security module is electrically connected to the access control module, the security module is electrically connected to the data backup module, the security module is electrically connected to the information encryption module, and the security module is electrically connected to the network intrusion detection module.

[0012] Furthermore, the network information management module is composed of a management server, a directory server, a certificate server and an application server.

[0013] Furthermore, the management server is bidirectionally electrically connected to the directory server, the management server is bidirectionally electrically connected to the directory server, the directory server is bidirectionally electrically connected to the certificate server, and the certificate server is bidirectionally electrically connected to the application server.

[0014] Compared with the prior art, the technical solution of this application has the following beneficial effects:

[0015] The high-security computer network information management system based on data processing, the network information management module, is composed of a basic operation information module, a server information module, a user information module, a network information resource module and a security module. The basic operation information module, the server information module, the user information module and the network information resource module are used to effectively process and manage data. The security performance of the computer network information management system is improved through the security module. In the process of using the computer, it can effectively prevent the influence of viruses on the computer, thereby ensuring the computer's ability to process data, and effectively protecting the computer's key data. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 is a system structure block diagram of the present invention;

[0017] Figure 2 It is a structural diagram of the basic operation information module of the present invention;

[0018] Figure 3 It is a structural schematic diagram of the security module of the present invention;

[0019] Figure 4 It is a structural diagram of the network information management module of the present invention. DETAILED DESCRIPTION

[0020] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0021] See also Figure 1-4 In this embodiment, a high-security computer network information management system based on data processing includes a network information management module, which includes a basic operation information module, a server information module, a user information module, a network information resource module and a security module.

[0022] The basic operation information module is bidirectionally electrically connected to the server information module, the server information module is bidirectionally electrically connected to the user information module, the user information module is bidirectionally electrically connected to the network information resource module, and the network information resource module is bidirectionally electrically connected to the security module.

[0023] Among them, the basic operation information module includes information interaction module, resource sharing module, collaborative processing module and computing distribution module.

[0024] The basic operation information module is electrically connected to the information interaction module, the basic operation information module is electrically connected to the resource sharing module, the basic operation information module is electrically connected to the collaborative processing module, and the basic operation information module is electrically connected to the calculation distribution module.

[0025] The basic operation information module includes IP address, domain name and autonomous system number. The server information module refers to the relevant information of the server that provides network information services, including the server configuration, information services and access status, load balancing, integrity and availability of information services, etc. The user information module is user information including name, identity, department, position, responsibilities and authority, and email, etc. It is an important part of security access control. We use user information to implement role-based access control, identity authentication, and role definition and modification, etc. These are the basis for maintaining network information management. At present, many servers have introduced Push technology to directly "push" the information that users care about to users, so that user management is also related to information resource management. The network information resource module refers to the information resources provided by network information services. Its management mainly includes information publishing, information filtering, indexing and navigation formation, etc. In the actual environment, the distribution of information on the server is non-linear and scattered, and information publishing is distributed and asynchronous, so we should publish information in an orderly and secure manner to prevent unreasonable information leakage and the introduction of bad information.

[0026] In addition, authorization determines which user can access specific data resources. Authorization determines the user's permissions. The user must wait until his identity is confirmed before he can perform authorized operations. Authorization is used to resist system intrusion. Access control lists and policy tags are common mechanisms. Authentication and authorization are closely related. Authentication is used to confirm the identity of the user and to combat threats such as impersonation and deception. Authentication includes entity authentication (confirming user identity) and data source authentication (confirming that data comes from a certain user). Non-repudiation means that the communicator cannot deny his participation in the communication process after the communication process is completed. Non-repudiation includes origin non-repudiation (protecting the interests of the recipient, proving the identity of the sender, the time of sending and the content of sending) and delivery non-repudiation (protecting the interests of the sender, proving the identity of the recipient, the time of receiving and the content of receiving).

[0027] It is very important to distinguish the categories of security issues because it helps to adopt appropriate security strategies. Security issues in network information management are divided into two categories. One is information access control, which mainly focuses on confidentiality, authorization, authentication and non-repudiation. The other is information security monitoring, which focuses on integrity and availability. Access control to network information and its information services is an important part of network information security management. The demand for access control comes from both users and resource owners. It involves the security control of personal information and information release. Network information resources can be accessed remotely. This feature determines that the traditional username / password method is far from meeting management needs. How to control access to network information and services has become an important issue in network security management. This requires strong rules to identify users and formulate access control strategies for network resources. The reason for information security monitoring is that no security system and measures can be considered foolproof. If a system has never found signs of being attacked, it is more likely that it has been attacked but has not been noticed. Based on the vulnerability and vulnerability of the network, we must discover the phenomenon of being attacked as early as possible, and promptly report the attack after being attacked, and promptly restore the damaged key data.

[0028] In addition, the network information management module is applied to terminal devices, intermediate devices, network media, hosts, servers, switches and routers. The reasons for information security problems caused by hardware are different. On the one hand, the decryption function of core components such as chips will cause information to be leaked and tampered through the chips of various hardware. On the other hand, if the hardware permissions are not set correctly, various Trojans and hackers may crack and obtain permissions to illegally process data. The firewall, as the "gate" that controls the entry and exit of computer information, may endanger information security if it is not set correctly or the firewall level is too low.

[0029] Due to the openness and sharing of the Internet, the purpose of computer network design is to quickly spread information and share information across the entire network. However, the security of information transmission was not fully considered at the beginning of computer network design, making the openness and sharing of the Internet a "double-edged sword". While users enjoy high-speed and convenient information transmission, they also bear the threat of information security vulnerabilities in systems, software, etc. when connected to the Internet. The existence of vulnerabilities means that computers are exposed to the network once they are connected to the Internet, and information security work requires that networked computers be properly protected through a variety of technical means.

[0030] The security module includes a network information antivirus module, an access control module, a data backup module, an information encryption module and a network intrusion detection module. The security module is electrically connected to the network information antivirus module, the security module is electrically connected to the access control module, the security module is electrically connected to the data backup module, the security module is electrically connected to the information encryption module, and the security module is electrically connected to the network intrusion detection module.

[0031] The functions of the security module include confidentiality, integrity and availability. Confidentiality means that only authorized users can access data information, which is used to prevent unauthorized users from accessing or copying data. Confidentiality is achieved through encryption technology. Integrity means that information is not illegally modified, deleted, or false information is inserted, and illegal message generation or retransmission is prevented, which is used to combat threats of communication destruction and retransmission. Availability means that legitimate users can use various resources without interference. A network information service system with availability should be able to recover promptly and correctly after an attack occurs.

[0032] The network information antivirus module should set up layers of defense for the computer network, adopt a combination of virus prevention and killing antivirus strategies, set up protection at all entrances and exits, and protect the security of files.

[0033] The access control module is an important means to maintain the security of the network system and protect network resources. It ensures that network resources are not illegally used and accessed. Various security policies must be coordinated to truly play a protective role. It includes: (1) network access control, (2) network permission control, (3) directory-level security control, (4) attribute security control, (5) network server security control, (6) network monitoring control, (7) network port and node security control, and (8) firewall control.

[0034] The data backup module separates the storage device from the network and host system and manages it centrally. It is an effective measure to prevent data loss and system startup failure. Adding a NAS network storage system, NAS is a large-capacity storage device that can be directly connected to the network through a HUB to back up the entire system.

[0035] The purpose of the information encryption module is to protect the data, files, passwords and control information within the network. It actively encrypts important information so that the data transmitted on the network is encrypted data to ensure that the information is not stolen, tampered with or destroyed. Common methods of network encryption include link encryption, endpoint encryption and node encryption.

[0036] The network intrusion detection module is the main defense method to prevent the network system from being destroyed or paralyzed due to malicious human attacks or misoperation. It is a tool that installs a network intrusion detection system in the network to provide prevention, detection, response to intrusion attacks, and automatic resistance. The network intrusion detection system is generally used in conjunction with a firewall.

[0037] Finally, the network information management module consists of a management server, a directory server, a certificate server and an application server. The management server is bidirectionally electrically connected to the directory server, the directory server is bidirectionally electrically connected to the certificate server, and the certificate server is bidirectionally electrically connected to the application server.

[0038] The management server is a web server that supports SSL. It provides a management interface and certificate application forms, and undertakes the task of access control. Users register basic information through the management server. After the registration is passed, the management server queries the access control policy (ACP) information from the directory server, and sends the user information and the corresponding access control policy to the certificate server. The certificate server issues a certificate of the corresponding role to the user based on this information. The management server and the certificate server access the directory server through LDAP. The system uses role-based access control to implement secure access control. Anyone who accesses must submit the corresponding certificate. The management server verifies the user's identity and determines the user's access rights. Only legitimate users can access and perform corresponding operations. The management server also It is responsible for security monitoring. It drives the corresponding functional modules to generate MD5 digests for key data files, and regularly monitors and compares the digests to determine whether they have been tampered with. If it is determined that the application server has been attacked, it will first alarm and notify the administrator to isolate the attacked application server from the Internet to prevent the intruder from causing deeper damage. If the service is damaged, the service will be restarted. If the key data is damaged, the error will be located and the damaged file will be restored with the backup data. All processing processes and results must generate reports to notify the management personnel. The key data of the network information management system mainly include system files (password files, network startup files, etc.), configuration files of network information services, key business information (various online forms, management documents, user information, etc.), etc.

[0039] Beneficial effects:

[0040] The network information management module is composed of the basic operation information module, server information module, user information module, network information resource module and security module. The basic operation information module, server information module, user information module and network information resource module are used to effectively process and manage data. The security module improves the security performance of the computer network information management system. In the process of using the computer, it can effectively prevent the influence of viruses on the computer, thereby ensuring the computer's ability to process data, while effectively protecting the computer's key data.

[0041] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0042] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A high-security computer network information management system for data processing, including a network information management module, characterized in that: The network information management module includes a basic operation information module, a server information module, a user information module, a network information resource module and a security module; The basic operation information module is bidirectionally electrically connected to the server information module, the server information module is bidirectionally electrically connected to the user information module, the user information module is bidirectionally electrically connected to the network information resource module, and the network information resource module is bidirectionally electrically connected to the security module.

2. A highly secure computer network information management system for data processing according to claim 1, characterized in that: The basic operation information module includes an information interaction module, a resource sharing module, a collaborative processing module and a calculation distribution module.

3. A highly secure computer network information management system for data processing according to claim 2, characterized in that: The basic operation information module is electrically connected to the information interaction module, the basic operation information module is electrically connected to the resource sharing module, the basic operation information module is electrically connected to the collaborative processing module, and the basic operation information module is electrically connected to the calculation distribution module.

4. A highly secure computer network information management system for data processing according to claim 1, characterized in that: The network information management module is applied to terminal equipment, intermediate equipment, network medium, host, server, switch and router equipment.

5. A highly secure computer network information management system for data processing according to claim 1, characterized in that: The security module includes a network information antivirus module, an access control module, a data backup module, an information encryption module and a network intrusion detection module. The functions of the security module include confidentiality, integrity and availability.

6. A highly secure computer network information management system for data processing according to claim 5, characterized in that: The security module is electrically connected to the network information antivirus module, the security module is electrically connected to the access control module, the security module is electrically connected to the data backup module, the security module is electrically connected to the information encryption module, and the security module is electrically connected to the network intrusion detection module.

7. A highly secure computer network information management system for data processing according to claim 1, characterized in that: The network information management module is composed of a management server, a directory server, a certificate server and an application server.

8. A highly secure computer network information management system for data processing according to claim 7, characterized in that: The management server is bidirectionally electrically connected to the directory server, the directory server is bidirectionally electrically connected to the certificate server, and the certificate server is bidirectionally electrically connected to the application server.

Images