Intranet and extranet cooperative network security early warning system

Abstract

The invention relates to an internal and external network cooperative network security early warning system, which is applied to a network with a mobile terminal and an internet large-area cloud server, and the mobile terminal comprises an internal and external network cooperative network security early warning system application. The application comprises an early warning sheet management module, an activity guarantee management module, an on-duty management module, a situation research and judgment module, a collaborative overview module and a to-do module. Wherein the Internet large-area cloud server comprises an internal and external network collaborative network security early warning micro-service module and a load balancing module which are deployed in the Internet large-area cloud server; wherein the Internet large-area cloud server is provided with a unified authority module and a secure interaction module.

Description

Technical Field

[0001] The present application relates to the field of information technology, and in particular to an intranet and extranet collaborative network security early warning system. Background Art

[0002] Energy and electricity are the "national heavy tools" to ensure the country's high-quality development. From personal clothing, food, housing, and transportation to the stable operation of industry and the efficient operation of society, energy and electricity are indispensable. As the meridian supporting energy and electricity, the power communication network plays a very important role in power dispatching, communication, and operation management. In recent years, with the continuous development of my country's economy and society and the successive holding of major events, attacks on power communication networks have become more intense. How to ensure the security of the power communication network and promptly eliminate the serious consequences that may be caused by network attacks, security vulnerabilities, and virus infiltration has become a top priority to support the safe operation of electricity and promote the high-quality development of the power grid.

[0003] In the past, the daily operation and maintenance of power communication networks was limited by the requirements of the power communication network operating environment, and generally required dedicated personnel to be on duty all day. Especially during major events, the density of on-duty personnel is greater and the time is longer. As the importance of energy and electricity continues to highlight, the daily work of power network security operation and maintenance personnel faces greater challenges, and the personnel gap is also increasing. Exploring effective ways to reduce the burden on operation and maintenance personnel, improve their work efficiency, and make up for the personnel gap is the key to ensuring the safe operation of power communication networks. Summary of the invention

[0004] In order to improve the security of the State Grid's intranet data, this application provides an intranet and extranet collaborative network security early warning system.

[0005] In order to achieve the above-mentioned purpose, the embodiment of the present application proposes an intranet collaborative network security early warning system, which is applied to a network having a mobile terminal and an Internet regional cloud server, wherein the mobile terminal includes an intranet collaborative network security early warning system application;

[0006] The Internet regional cloud server includes:

[0007] The intranet and extranet collaborative network security early warning microservice module and load balancing module deployed on the Internet regional cloud server;

[0008] The Internet regional cloud server is provided with a unified authority module; the unified authority module is used for the mobile terminal to automatically jump to the unified authority module when it is connected to the networked regional cloud server so that the mobile terminal can log in through the account; the unified authority module is used to allocate a token after the mobile terminal logs in and jump to the application; it is also used to send the token to the business background after obtaining the data to parse the user information and complete the user authority comparison; after the Internet regional cloud server obtains the response of the permission processing result of the mobile terminal, the configuration menu corresponding to the user role of the mobile terminal is displayed in the application;

[0009] The Internet regional cloud server also includes a security interaction module, wherein the security interaction module is used to allocate a dynamic interface to the mobile terminal according to the received security parameters after the user login authentication is successful; the security interaction module establishes a proxy server at the local 127.0.0.1 address after verifying that the security parameters are passed; wherein the system application realizes communication with the business background through the AJAX object provided by the browser.

[0010] The mobile terminal includes the intranet and extranet collaborative network security early warning system applications including:

[0011] The warning order management module is used to classify according to roles to realize the full-process business functions of creating, editing, reviewing, issuing, feedback, archiving and querying warning orders;

[0012] The activity support management module is used to filter and view major activities and tasks, as well as view feedback details by task and download feedback files;

[0013] The duty management module is used to realize duty calendar query, duty data statistics, and query, application, and review of replacement shifts;

[0014] Situation analysis module, used to realize data statistics of attacked assets, attack sources, attack types and attack trends;

[0015] Collaborative overview module, used to realize the statistics of personnel activities guarantee and early warning sheet completion in prefecture-level cities;

[0016] The To-Do module is used to push the business process data information that should be processed according to the role of the current logged-in person.

[0017] The beneficial effects of the above-mentioned technical solution of the present application are as follows: The internal and external network collaborative network security early warning system provided by the embodiment of the present disclosure realizes content collaboration at any time, any place, and any network environment under the premise of complying with data transmission security and data processing timeliness, and effectively improves the convenience and timeliness of the work of power grid security operation and maintenance personnel. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 This is the functional diagram of the intranet and extranet collaborative network security early warning system;

[0019] Figure 2 This is a schematic diagram of the architecture of the intranet and extranet collaborative network security early warning system. DETAILED DESCRIPTION

[0020] In order to make the technical problems, technical solutions and advantages to be solved by the present application clearer, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.

[0021] Energy and electricity are the "national heavy tools" to ensure the country's high-quality development. From personal clothing, food, housing, and transportation to the stable operation of industry and the efficient operation of society, energy and electricity are indispensable. As the meridian supporting energy and electricity, the power communication network plays a very important role in power dispatching, communication, and operation management. In recent years, with the continuous development of my country's economy and society and the successive holding of major events, attacks on power communication networks have become more intense. How to ensure the security of the power communication network and promptly eliminate the serious consequences that may be caused by network attacks, security vulnerabilities, and virus infiltration has become a top priority to support the safe operation of electricity and promote the high-quality development of the power grid.

[0022] In the past, the daily operation and maintenance of power communication networks was limited by the requirements of the power communication network operating environment, and generally required dedicated personnel to be on duty all day. Especially during major events, the density of on-duty personnel is greater and the time is longer. As the importance of energy and electricity continues to highlight, the daily work of power network security operation and maintenance personnel faces greater challenges, and the personnel gap is also increasing. Exploring effective ways to reduce the burden on operation and maintenance personnel, improve their work efficiency, and make up for the personnel gap is the key to ensuring the safe operation of power communication networks.

[0023] The embodiment of the present application proposes an intranet and extranet collaborative network security warning system, which can be used for data exchange such as activity assurance, security warning, duty information, etc. between the intranet and extranet, and complete the internal and extranet related business processes and data processing.

[0024] The mobile system applications mainly include early warning management, activity support management, duty management, situation analysis, collaborative overview and other modules. The functions of each module are as follows:

[0025] Warning form management: According to role classification, the whole process of warning form creation, editing, review, issuance, feedback, archiving, query, etc. is realized;

[0026] Activity support management: filter and view major activities and tasks, view feedback details by task, download feedback files, etc.

[0027] Duty management module: duty calendar query, duty data statistics, and query, application, review and other business functions of replacement shifts;

[0028] Situation analysis: statistics on attacked assets, attack sources, attack types, and attack trends;

[0029] Collaborative overview: statistics on the activities of personnel in prefectures and cities, and the completion of early warning sheets;

[0030] To-do: Push the business process data information that should be processed according to the role of the current login user.

[0031] When the user clicks on the above-mentioned functional module, the application will establish a secure link with the Internet regional cloud service. After the cloud service receives the access request, it will forward the data request to the management information regional cloud database in the high-intensity logical isolation channel of the security network isolation device, and finally return the result to the mobile terminal after completing the data operation.

[0032] The implementation method of the internal and external network collaborative network security early warning system can be divided into three parts: system deployment, authority authentication, and data acquisition. The specific two parts are detailed as follows:

[0033] 1. System deployment

[0034] Deploy the intranet and extranet collaborative network security early warning microservice on the Internet regional cloud server, and complete the load balancing configuration to achieve high service availability. Complete the installation of the intranet and extranet collaborative network security early warning system application on the mobile terminal.

[0035] 2. Permission Authentication

[0036] Since the system integrates a unified permission platform, when a user enters the application, the system will automatically jump to the unified permission login page. After the user successfully logs in with the account and authenticates successfully, the unified permission platform will assign a token and jump back to the APP. Through the data acquisition in the following part 3, the token is sent to the business background, the user information is parsed, and the user permission comparison is completed. After the system obtains the response of the permission processing result, the user's role has been configured menu in the application.

[0037] 3. Data Acquisition

[0038] After the user successfully logs in, the system will carry parameters to request the secure interactive platform to obtain the dynamic port. After the secure interactive platform verifies that the security parameters have passed, the secure interactive platform component will establish a proxy server at the local 127.0.0.1 address, and then the system application will communicate with the business backend through the AJAX object provided by the browser.

[0039] When the user clicks on the system business module, the system automatically adds the port parameter to the business request URL path and sends the business request. After receiving and parsing the request, the Internet region microservice sends a data acquisition request with parameters to the security network isolation device. After all parameters are verified, the security network isolation device proxies the request to the corresponding cloud database of the management information region. After a series of data operations, the dynamic response of the data is completed.

[0040] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs. When the computer program is loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program may be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage medium such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a high-density digital video disc (DVD)), or a semiconductor medium (eg, a solid state disk (SSD)).

[0041] A person skilled in the art may understand that the various numerical numbers such as first and second involved in the present application are only used for the convenience of description and are not used to limit the scope of the embodiments of the present application, and also indicate the order of precedence.

[0042] At least one in the present application can also be described as one or more, and a plurality can be two, three, four or more, which is not limited in the present application. In the embodiments of the present application, for a technical feature, the technical features in the technical feature are distinguished by "first", "second", "third", "A", "B", "C" and "D", etc., and there is no order of precedence or size between the technical features described by the "first", "second", "third", "A", "B", "C" and "D".

[0043] The corresponding relationships shown in each table in the present application can be configured or predefined. The values ​​of the information in each table are only examples and can be configured as other values, which are not limited by the present application. When configuring the corresponding relationship between the information and each parameter, it is not necessarily required to configure all the corresponding relationships illustrated in each table. For example, in the table in the present application, the corresponding relationships shown in some rows may not be configured. For another example, appropriate deformation adjustments can be made based on the above table, such as splitting, merging, etc. The names of the parameters shown in the titles of the above tables can also use other names that can be understood by the communication device, and the values ​​or representations of the parameters can also be other values ​​or representations that can be understood by the communication device. When implementing the above tables, other data structures can also be used, such as arrays, queues, containers, stacks, linear lists, pointers, linked lists, trees, graphs, structures, classes, heaps, hash tables or hash tables.

[0044] The predefined in the present application may be understood as defined, predefined, stored, pre-stored, pre-negotiated, pre-configured, solidified, or pre-burned.

[0045] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0046] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0047] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. An intranet and extranet collaborative network security early warning system, applied to a network having a mobile terminal and an Internet regional cloud server, wherein the mobile terminal includes an intranet and extranet collaborative network security early warning system application; The Internet regional cloud server includes: The intranet and extranet collaborative network security early warning microservice module and load balancing module deployed on the Internet regional cloud server; The Internet regional cloud server is provided with a unified authority module; the unified authority module is used for the mobile terminal to automatically jump to the unified authority module when it is connected to the networked regional cloud server so that the mobile terminal can log in through the account; the unified authority module is used to allocate a token after the mobile terminal logs in and jump to the application; it is also used to send the token to the business background after obtaining the data to parse the user information and complete the user authority comparison; after the Internet regional cloud server obtains the response of the permission processing result of the mobile terminal, the configuration menu corresponding to the user role of the mobile terminal is displayed in the application; The Internet regional cloud server also includes a security interaction module, wherein the security interaction module is used to allocate a dynamic interface to the mobile terminal according to the received security parameters after the user login authentication is successful; the security interaction module establishes a proxy server at the local 127.0.0.1 address after verifying that the security parameters are passed; wherein the system application realizes communication with the business background through the AJAX object provided by the browser.

2. The intranet collaborative network security early warning system according to claim 1, wherein the mobile terminal of the mobile terminal includes an intranet collaborative network security early warning system application including: The warning order management module is used to classify according to roles to realize the full-process business functions of creating, editing, reviewing, issuing, feedback, archiving and querying warning orders; The activity support management module is used to filter and view major activities and tasks, as well as view feedback details by task and download feedback files; The duty management module is used to realize duty calendar query, duty data statistics, and query, application, and review of replacement shifts; Situation analysis module, used to realize data statistics of attacked assets, attack sources, attack types and attack trends; Collaborative overview module, used to realize the statistics of personnel activities guarantee and early warning sheet completion in prefecture-level cities; The To-Do module is used to push the business process data information that should be processed according to the role of the current logged-in person.

Images