System and method for solving potential safety hazard of terminal

Abstract

The invention provides a system and a method for solving potential safety hazards of a terminal. The system comprises a multi-channel inspection service module and a public inspector, the multi-channel inspection service module is used for calling the public inspector according to inspection items and set inspection rules; the public inspector is used for inspecting the terminal according to the inspection items and the inspection rules to form an inspection result; and repairing potential safety hazards existing in the terminal according to the inspection result. The multi-channel inspection service module is adopted to call the public inspector, and the public inspector is utilized to inspect and repair the terminal according to requirements, so that potential safety hazards existing in the terminal are repaired, the terminal is inspected according to the inspection items and the inspection rules, and then the potential safety hazards are repaired according to the inspection results, so that the safety of the terminal is improved. And the terminal with potential safety hazards due to inconformity with management requirements can be checked and repaired.

Description

Technical Field

[0001] The present invention belongs to the field of computer technology, and in particular relates to a system and method for solving terminal security risks. Background Art

[0002] In recent years, due to the increasing number of information security incidents, coupled with weak security awareness and limited computer operation level, computer security risks often exist. If the risks are not handled in a timely manner, they may develop into information security incidents, resulting in incalculable losses. Therefore, it is particularly important to conduct regular inspections of computers.

[0003] When the current software performs a physical examination on the terminal, it mainly checks whether there is system garbage, whether there are Trojan viruses in the files in the terminal, and whether the hardware is normal. It does not check and repair terminals that have security risks because they do not meet management requirements. Summary of the invention

[0004] To overcome the above-mentioned deficiencies of the prior art, in a first aspect, the present invention application proposes a system for solving terminal security risks, including: a multi-channel inspection service module and a public inspector;

[0005] The multi-channel inspection service module is used to call the public inspector according to the inspection items and the set inspection rules;

[0006] The public checker is used to check the terminal according to the check items and the check rules to form an inspection result; and repair the potential safety hazards existing in the terminal according to the inspection result.

[0007] Preferably, the system further comprises: a data storage terminal;

[0008] The multi-channel inspection service module includes: a client, a security inspection service module;

[0009] The client is used to call the public checker using WPF technology according to the check items; and receive the check result returned by the public checker; based on the check result, provide a repair plan for the security risks existing in the terminal;

[0010] The security check service module is used to call the public checker to check the terminal according to the check rule;

[0011] The public checker is specifically used to repair the potential safety hazard existing in the terminal according to the repair plan; and is also used to report the inspection items and the inspection results to the data storage terminal;

[0012] The data storage end is used to form a total inspection result according to the inspection results according to the data relationship; and store the total inspection result and the inspection items separately.

[0013] Preferably, the inspection items include: network card inspection, network configuration inspection, screen saver inspection, password inspection, firewall inspection, disabled software inspection, access software inspection, and software version inspection.

[0014] Preferably, the system further includes: a Web terminal;

[0015] The Web end is used to obtain the data of the data storage end, generate statistical analysis results based on the total inspection results and the inspection items of the data storage end; and export the statistical analysis results in a table form;

[0016] The statistical analysis results include: the number of inspection result records reported daily, the number of inspection records in the past few days, a line chart analysis of the number of daily reports since going online, a pie chart of passed and failed inspection records, and a bar chart analysis of the reasons for terminal inspection failure.

[0017] Preferably, the public checker is further used to analyze the terminals that have not been checked according to the check items based on the check results; and re-check the terminals that have not been checked according to the check items.

[0018] Preferably, the data storage end is also used to provide responses to the client, the public checker, and the security check service module;

[0019] The response includes: a response to the update request of the client, a response to the public checker's request for software access, software disabling and software version, a response to the update request of the security check service module, a response to the storage of the check result, and a response to the statistical analysis data.

[0020] Preferably, the repair scheme includes: fully automated repair, semi-automated repair, and manual repair.

[0021] Preferably, the client is further configured to send a request to the data storage end each time it is started whether a software version needs to be updated; and is further configured to receive the request for software version update in response to the data storage end; and download, store and decompress the software resource package for software version update, delete the data and resource package of the old software of the client, install the software resource package for software version update and start the installed software according to the received request for software version update.

[0022] The data storage end is further used to respond to the address of the software resource package that needs to be updated and stored by the client based on the request of whether the software version needs to be updated.

[0023] Preferably, the public checker is further used to send a request to the data storage end, requesting to compare the access software information, the prohibited software information and the software version information with the access software information actually installed in the terminal to form an inspection result.

[0024] In a second aspect, the present invention also provides a method for solving terminal security risks, including:

[0025] The multi-channel inspection service module is used to call the public inspector according to the inspection items and the set inspection rules;

[0026] The public inspector is used to inspect the terminal according to the inspection items and the inspection rules to form an inspection result; and the potential safety hazards existing in the terminal are repaired according to the inspection result.

[0027] In a third aspect, the present invention application further proposes an electronic device, comprising: at least one processor and a memory; the memory and the processor are connected via a bus;

[0028] The memory is used to store one or more programs;

[0029] When the one or more programs are executed by the at least one processor, the method for solving terminal security risks is implemented.

[0030] In a fourth aspect, the present invention application further proposes a readable storage medium having an execution program stored thereon, and when the execution program is executed, the method for solving terminal security risks is implemented.

[0031] Compared with the closest prior art, the present invention has the following beneficial effects:

[0032] The present invention application provides a system and method for solving terminal security risks, including: a multi-channel inspection service module and a public inspector; the multi-channel inspection service module is used to call the public inspector according to the inspection items and the set inspection rules; the public inspector is used to inspect the terminal according to the inspection items and the inspection rules to form an inspection result; according to the inspection result, the security risks existing in the terminal are repaired. The multi-channel inspection service module is used to call the public inspector, and the public inspector inspects and repairs the terminal according to the requirements, thereby realizing the repair of the security risks existing in the terminal. Since the terminal is inspected according to the inspection items and the inspection rules, and then the security risks are repaired according to the inspection results, it is possible to inspect and repair the terminal that has security risks due to non-compliance with management requirements. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 An architectural diagram of a system for solving terminal security risks provided by the present invention;

[0034] Figure 2 A flowchart of a method for solving terminal security risks provided by the present invention;

[0035] Figure 3 A system architecture diagram for a specific use case of a method for solving terminal security risks provided by the present invention;

[0036] Figure 4 A schematic diagram of the operation of an electronic device provided in the present invention application. DETAILED DESCRIPTION

[0037] The specific implementation methods of the present invention are further described in detail below with reference to the accompanying drawings.

[0038] Embodiment 1:

[0039] like Figure 1 As shown, the present invention provides a system for solving terminal security risks, including: a multi-channel inspection service module and a public inspector;

[0040] The multi-channel inspection service module is used to call the public inspector according to the inspection items and the set inspection rules;

[0041] The public checker is used to check the terminal according to the check items and the check rules to form an inspection result; and repair the potential safety hazards existing in the terminal according to the inspection result.

[0042] The terminal described in the embodiment of the present invention may be a computer.

[0043] As mentioned above, the public checker can build eight inspection items based on .NET Framework 4.0, including but not limited to one or more of the following: network card inspection, network configuration inspection, screen saver inspection, password inspection, firewall inspection, disabled software inspection, access software inspection, software version inspection, etc. Among them, the network card inspection mainly checks whether there are multiple network cards and whether the wireless network has been connected; the network configuration inspection mainly checks whether the configuration of IPv4 (only for example, in some cases it can also include IPv6), including whether IP (Internet Protocol), subnet mask, and gateway comply with the established rules; the screen saver inspection mainly checks whether the screen saver is turned on and whether the screen saver time is less than or equal to the set time (for example, 5 minutes); the password inspection mainly checks whether the password is a weak password and whether the browser has saved the password; the firewall inspection mainly checks whether the protective wall is turned on and whether the high-risk port is blocked; the disabled software inspection mainly checks whether the computer has installed disabled software; the access software inspection mainly checks whether the computer has installed the necessary software in accordance with the regulations; the software version inspection mainly checks whether the software version installed on the computer meets the management requirements.

[0044] For example, the inspection items may include the aforementioned eight items. The advantage of determining the eight items is that the disabled software and the access software can be checked, and the version of the access software can be checked. Firewalls, passwords, screen savers, etc. are all checked. Comprehensive checks are also performed on important links such as network configuration and network cards, thereby improving the security of the terminal.

[0045] Furthermore, the system may also include: a data storage terminal;

[0046] The multi-channel inspection service module may include: a client, a security inspection service module;

[0047] The client is used to call the public checker according to the check items by using WPF (Windows Presentation Foundation) technology; and receive the check result returned by the public checker; and provide a repair plan for the security risks existing in the terminal based on the check result;

[0048] The security check service module is used to call the public checker to check the terminal according to the check rule;

[0049] The public checker is specifically used to repair the potential safety hazard existing in the terminal according to the repair plan; and is also used to report the inspection items and the inspection results to the data storage terminal;

[0050] The data storage end is used to form a total inspection result according to the inspection results according to the data relationship; and store the total inspection result and the inspection items separately.

[0051] As mentioned above, the client uses WPF technology to call the public checker, and checks the computer through the public checker, wherein the check result is displayed on the client and a one-click repair solution is given. If there is a "failed" check item in the check result, the client is used for repair; the client can set a one-click repair button, and when repairing, the user clicks the one-click repair button on the client to perform a one-click repair; after the repair is completed, the client or the public checker reports the check result to the data storage end at the same time; the aforementioned repair solution provides guidance for the public checker to perform repair. The security check service module can be a windows service. The inspection rules include the inspection time rules. When the security check service module calls the public checker to check the terminal and reports the inspection results, the security check service module automatically calls the public checker to check the terminal according to the inspection time rules and reports the inspection results to the data storage end. The data storage end may have a MySQL database. When the client or security inspection service module calls the public inspector and reports the inspection results to the data storage end for storage, the inspection result data may be stored in the MySQL database of the data storage end. The inspection results are stored in a "one-to-many" data relationship, where "one-to-many" means that the total inspection result corresponds to multiple inspection items. The total inspection result and the inspection items are stored separately for statistical analysis.

[0052] Among them, the repair scheme includes: fully automated repair, semi-automated repair, and manual repair. Fully automated repair can be a project that is automatically repaired by the computer without the need for the user to operate the terminal or computer. Semi-automated repair can be computer-based, but requires user cooperation, and manual repair is done by the user. The repair schemes are all located in the repair center of the terminal. For example, "high-risk ports are not blocked" and "wireless connection records exist" are fully automated repair projects that can be completed by the computer itself; "password check item fails" is a semi-automated repair project that requires the user to enter a new password that meets the requirements; "dual network cards exist" is a manual repair project that requires the user to handle it by themselves.

[0053] Furthermore, the public checker is further used to analyze the terminals that have not been checked according to the check items based on the check results; and re-check the terminals that have not been checked according to the check items.

[0054] Furthermore, the public checker is also used to send a request to the data storage end, requesting to compare the access software information, the prohibited software information and the software version information with the access software information actually installed in the terminal to form an inspection result.

[0055] As mentioned above, the data storage end can store the access software information, the disabled software information, and the software version information, which can be used to set customized security rules to the client. During the inspection, whether the client calls the public checker or the security inspection service module calls the public checker, the public checker can send a request to the data storage end, requesting the access software information, the disabled software information and the software version information to be compared with the software actually installed in the computer to obtain the inspection result.

[0056] Furthermore, the data storage end is also used to provide responses to the client, the public checker, and the security check service module; the responses include: responses to update requests from the client, responses to requests from the public checker for access software, disabled software, and software versions, responses to update requests from the security check service module, responses to storage of inspection results, and responses to statistical analysis data.

[0057] As mentioned above, the response can be a client resource that responds to the latest version of the client, mainly used for automatic client updates;

[0058] Furthermore, the system may also include: a Web terminal;

[0059] The Web end is used to obtain the data of the data storage end, generate statistical analysis results based on the total inspection results and the inspection items of the data storage end; and export the statistical analysis results in a table form;

[0060] The statistical analysis results include: the number of inspection result records reported daily, the number of inspection records in the past few days, a line chart analysis of the number of daily reports since going online, a pie chart of passed and failed inspection records, and a bar chart analysis of the reasons for terminal inspection failure.

[0061] As mentioned above, the Web end obtains data from the data storage end, and can use (Metabase) visual analysis to generate statistical analysis results based on the total inspection results and inspection items of the data storage end; then generate the statistical analysis results in a table format, and export the statistical analysis results or the table; the statistical analysis results are exported in a table format to facilitate management personnel to review, help management personnel to grasp the terminal hidden danger information, and urge and order relevant personnel to make timely rectifications, effectively grasp the hidden danger trends, accurately grasp the most likely security hidden dangers in computers, and adjust the terminal management and control strategies in a targeted manner. The statistical analysis results can include: the number of inspection records reported daily, the number of inspection records in the past few days (for example, the past 30 days), the line chart analysis of the number of daily reports since the launch, the pie chart of passed and failed inspection records in multiple days, the bar chart of inspection records classified by client version in multiple days, and the bar chart analysis of the reasons for computer failure in multiple days.

[0062] Furthermore, the client is also used to send a request to the data storage end each time it is started whether the software version needs to be updated; and is also used to receive the request for updating the software version in response to the data storage end; according to the received request for updating the software version, download, store and decompress the software resource package that needs to be updated, delete the data and resource package of the old software of the client, install the software resource package that needs to be updated and start the installed software;

[0063] The data storage end is further used to respond to the address of the software resource package that needs to be updated and stored by the client based on the request of whether the software version needs to be updated.

[0064] Specifically, each time the client starts, the client sends a request to the data storage end whether an update is needed, and the data storage end responds to the client. If no update is needed, the response is that no update is needed; if an update is needed, the client can be responded to with the actual address of the resource package stored in the client, and the client downloads and decompresses the resource while deleting the old data, and finally starts the new version of the client. This enables the client to automatically update without having to install each time a new version is released.

[0065] like Figure 2 As shown, the present invention provides a specific use case for a system for solving terminal security risks, including: the client uses WPF technology to call a public checker according to the inspection items, the security inspection service module calls the public checker to inspect the terminal, the public checker performs the inspection according to the client and the security inspection service module, the public checker interacts with the data storage end, and the public checker reports the inspection result to the data storage end after performing the inspection; the Web end obtains the inspection result stored in the data storage end, and can use visual analysis (Metabase) to generate statistical analysis results for the total inspection results and inspection items of the data storage end; the data storage end and the client interact with each other, so that the data storage end can provide a response to the client.

[0066] In summary, this system has the following advantages over traditional computer managers and guards:

[0067] 1. Solve security risks according to management requirements. This system is aimed at the requirements of terminal or computer management security risks, checks out terminals or computers that do not meet management requirements and makes rectifications to avoid information insecurity incidents caused by security risks.

[0068] 2. Easy to expand, convenient and quick to use. The system includes a public checker, a client and a security check service module. The public checker can add new check items horizontally and is easy to expand. The client of a new platform can also be added vertically and is also easy to expand. When the system is running, the client supports automatic updates, and there is no need to reinstall when a new version is released. The test results can be quickly obtained during operation. The system does not need to scan disk files when running. Most detection software needs to scan the entire disk, which is very time-consuming and consumes system resources. Therefore, the system of the present invention runs fast.

[0069] 3. The system of the present invention supports one-click repair. When a terminal or computer is found to have hidden dangers, it can be rectified immediately to eliminate the hidden dangers.

[0070] 4. Perform data mining and analysis. The client and security inspection service module inspect the terminal and report the inspection results. The data storage end can perform data analysis and display the analysis results on the Web end. Through this data and information, you can understand the hidden dangers of the terminal or computer, solve the terminal or computer security hidden dangers, locate the focus of terminal management work, and effectively prevent information security incidents caused by terminal hidden dangers.

[0071] The system provided by the present invention can detect the hidden dangers of the terminal and process the hidden dangers detected by one key, and at the same time analyze the hidden danger data of the terminal, which is a closed-loop terminal security method and system. The client can be constructed based on .NetFramewrok4.0 using WPF technology. The user can perform security detection through the client. The illegal items can be immediately rectified through the one-key repair function of the client; at the same time, the collected inspection results are reported to the data storage end, and the data storage end analyzes the personnel who have not been inspected as required and the personnel who have not passed the inspection through the reported data and orders the relevant personnel to make rectifications; the security inspection service is run in the form of Windows service, and the security inspection service checks the computer regularly in the form of inspection time rules and reports the results to the data storage end; the Web end is the visualization of the data of the server end, which helps the management personnel to grasp the terminal hidden danger information. Through the technical scheme of this embodiment, the relevant personnel can be urged to make rectifications in time, the hidden danger trend can be effectively grasped, the most likely and most likely hidden dangers of the computer can be accurately grasped, and the computer management and control strategy can be adjusted in a targeted manner to save time and effort and accurately solve the problem, avoid the escalation of hidden dangers, and cause irreversible serious consequences.

[0072] Embodiment 2:

[0073] like Figure 3 As shown, the present invention provides a method for solving terminal security risks, including:

[0074] Step 1: Use the multi-channel inspection service module to call the public inspector according to the inspection items and the set inspection rules;

[0075] Step 2: Use the public inspector to inspect the terminal according to the inspection items and the inspection rules to form an inspection result; and repair the security risks existing in the terminal according to the inspection result.

[0076] In step 1, the multi-channel inspection service module includes: a client and a security inspection service module; the client uses WPF technology to call the public inspector according to the inspection items; and receives the inspection results returned by the public inspector; based on the inspection results, a repair plan is given for the security risks existing in the terminal; the security inspection service module calls the public inspector to inspect the terminal according to the inspection rules;

[0077] The security check service module calls the public checker to check the terminal according to the check rules; the client uses WPF technology to call the public checker according to the check items; and receives the check result returned by the public checker; based on the check result, a repair plan is given for the security risks existing in the terminal;

[0078] In step 2, the public checker is specifically used to repair the potential safety hazards existing in the terminal according to the repair plan; and is also used to report the inspection items and inspection results to the data storage end;

[0079] When performing the inspection, based on the inspection results, terminals that have not been inspected according to the inspection items are analyzed; and the terminals that have not been inspected according to the inspection items are re-inspected.

[0080] The inspection items mainly include: network card inspection, network configuration inspection, screen saver inspection, password inspection, firewall inspection, disabled software inspection, access software inspection and software version inspection.

[0081] Repair solutions include: fully automated repair, semi-automated repair, and manual repair.

[0082] The present invention may also include: a data storage end, which forms a total inspection result according to the inspection results according to the data relationship; the total inspection result and the inspection items are stored separately, and the data storage end provides a response to the client, the public inspector, and the security inspection service module.

[0083] The above responses include: responses to client update requests, responses to public checker requests for software access, software disabling and software versions, responses to security check service module update requests, responses to storage of check results and responses to statistical analysis data.

[0084] The present invention may also include: a Web end. The method of the present invention may use the Web end to obtain data from the data storage end, and generate statistical analysis results based on the total inspection results and inspection items of the data storage end; the statistical analysis results are exported in a table form; when exporting, a specified time export is set, and the IP addresses of all computers inspected within the specified time can be exported, the IP addresses that failed the last inspection within the specified time can be exported, and the IP addresses that have not been inspected within the specified time can be exported, etc.

[0085] The above statistical analysis results include: the number of inspection result records reported daily, the number of inspection records in the past few days, the line chart analysis of the number of daily reports since going online, the pie chart of passed and failed inspection records, and the bar chart analysis of the reasons for terminal inspection failure.

[0086] The above-mentioned exported statistical analysis results or tables can be viewed intuitively by managers, helping them to grasp terminal hidden danger information.

[0087] The method of the present invention also takes into account the update of the client. Each time the client is started, the client will send a request to the data storage end whether an update is required, and the data storage end will respond to the client. If no update is required, the response is that no update is required; if an update is required, the actual address of the resource package stored in the client can be responded to, and the client downloads and decompresses the resources while deleting the old data, and finally starts the new version of the client. The client can be automatically updated without having to install each time a new version is released.

[0088] In summary, the method of the present invention can realize the inspection of terminal or computer management security risks, and rectify the terminals or computers that do not meet the management requirements, so as to avoid information security incidents caused by security risks; the client can be automatically updated; the system supports one-click repair, which can eliminate risks in time; the data situation can be displayed in a centralized manner, making it convenient for managers to grasp the potential risks of terminals or computers.

[0089] It is understandable that:

[0090] The client interface can be written in Extensible Application Markup Language (XAML). Extensible Application Markup Language (XAML): It is a simple declarative language based on Extensible Markup Language (XML). Using XAML can solve the long-standing problems we all face in GUI (Graphical User Interface, GUI for short, also known as graphical user interface) design. It can be used to design UI (User Interface) elements in Windows Forms applications.

[0091] Windows Rendering Foundation (WPF): WPF is a resolution-independent UI framework that uses a vector-based rendering engine and is built to take advantage of modern graphics hardware.

[0092] Windows Service (formerly known as NT Service): is a special application that allows users to create executable applications that can run for a long time in their own Windows session, that is, applications that run in the background, do not require user interface interaction, and are usually started automatically when the operating system starts.

[0093] Metabase: is an open source business intelligence platform. It is an open source, simple but powerful analysis tool that is seamlessly compatible with big data and traditional databases. It helps everyone in the company learn and mine corporate data, thereby achieving better data-based operations and decision-making.

[0094] Embodiment 3:

[0095] like Figure 4 As shown, the present invention also provides an electronic device, which may be a computer device, a single-chip device, an intelligent mobile device, etc. The electronic device in this embodiment may include a processor, a memory, a transceiver component, etc. The memory, the processor, and the transceiver component are connected via a bus; the memory may be used to store an execution program, and an exemplary execution program may include instructions; the processor is used to execute the instructions stored in the memory. The memory may also be used to store data, which may be called and / or modified when the instructions are executed.

[0096] The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. It is the computing core and control core of the terminal, which is suitable for implementing one or more instructions, specifically suitable for loading and executing one or more instructions in a storage medium to implement a corresponding method flow or corresponding function, so as to implement the steps of a method for solving terminal security risks in the above-mentioned embodiment.

[0097] Embodiment 4:

[0098] Based on the same inventive concept, the present invention also provides a readable storage medium, specifically an electronic device readable storage medium (Memory), which is a memory device in an electronic device for storing programs and data. It can be understood that the storage medium here can include both built-in storage media in the electronic device and, of course, extended storage media supported by the electronic device. The storage medium provides a storage space, which stores the operating system of the terminal. In addition, one or more instructions suitable for being loaded and executed by the processor are also stored in the storage space, and these instructions can be one or more execution programs (including program codes). It should be noted that the storage medium here can be a high-speed RAM memory or a non-volatile memory, such as at least one disk memory. The processor loads and executes one or more instructions stored in the storage medium, which can implement the steps of a method for solving terminal security risks in the above embodiment.

[0099] Those skilled in the art will appreciate that the embodiments of the present invention application can be provided as methods, systems, or computer program products. Therefore, the present invention application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present invention application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0100] The present invention application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present invention application. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0101] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0102] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0103] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention application rather than to limit its protection scope. Although the present invention application is described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that after reading the present invention application, those skilled in the art can still make various changes, modifications or equivalent substitutions to the specific implementation methods of the application, but these changes, modifications or equivalent substitutions are all within the protection scope of the claims to be approved.

Claims

1. A system for solving terminal security risks, characterized in that: include: Multi-channel inspection service module and public inspector; The multi-channel inspection service module is used to call the public inspector according to the inspection items and the set inspection rules; The public checker is used to check the terminal according to the check items and the check rules to form an inspection result; and repair the security risks existing in the terminal according to the inspection result.

2. The system according to claim 1, characterized in that Also includes: Data storage end; The multi-channel inspection service module includes: a client, a security inspection service module; The client is used to call the public checker using WPF technology according to the check items; and receive the check result returned by the public checker; based on the check result, provide a repair plan for the security risks existing in the terminal; The security check service module is used to call the public checker to check the terminal according to the check rule; The public checker is specifically used to repair the potential safety hazard existing in the terminal according to the repair plan; and is also used to report the inspection items and the inspection results to the data storage terminal; The data storage end is used to form a total inspection result according to the inspection results according to the data relationship; and store the total inspection result and the inspection items separately.

3. The system according to claim 1 or 2, characterized in that: The inspection items include: network card inspection, network configuration inspection, screen saver inspection, password inspection, firewall inspection, disabled software inspection, access software inspection, and software version inspection.

4. The system according to claim 2, characterized in that Also includes: Web end; The Web end is used to obtain the data of the data storage end, and generate statistical analysis results based on the total inspection result and the inspection items of the data storage end; Exporting the statistical analysis results in a table form; The statistical analysis results include: the number of inspection result records reported daily, the number of inspection records in the past few days, a line chart analysis of the number of daily reports since going online, a pie chart of passed and failed inspection records, and a bar chart analysis of the reasons for terminal inspection failure.

5. The system according to claim 1 or 2, characterized in that: The public checker is further used to analyze the terminals that have not been checked according to the check items based on the check results; and re-check the terminals that have not been checked according to the check items.

6. The system according to claim 4, characterized in that The data storage end is also used to provide responses to the client, the public checker, and the security check service module; The response includes: a response to the update request of the client, a response to the public checker's request for software access, software disabling and software version, a response to the update request of the security check service module, a response to the storage of the check result, and a response to the statistical analysis data.

7. The system according to claim 2, characterized in that The repair scheme includes: fully automated repair, semi-automated repair, and manual repair.

8. The system according to claim 6, characterized in that The client is also used to send a request to the data storage end each time it is started whether the software version needs to be updated; and is also used to receive the request for updating the software version in response to the data storage end; according to the received request for updating the software version, download, store and decompress the software resource package that needs to be updated, delete the data and resource package of the old software of the client, install the software resource package that needs to be updated and start the installed software; The data storage end is further used to respond to the address of the software resource package that needs to be updated and stored by the client based on the request of whether the software version needs to be updated.

9. The system according to claim 2, 6 or 8, characterized in that: The public checker is further used to send a request to the data storage end, requesting to compare the access software information, the prohibited software information and the software version information with the access software information actually installed in the terminal to form a check result.

10. A method for solving terminal security risks, characterized in that: include: The multi-channel inspection service module is used to call the public inspector according to the inspection items and the set inspection rules; The public inspector is used to inspect the terminal according to the inspection items and the inspection rules to form an inspection result; and the potential safety hazards existing in the terminal are repaired according to the inspection result.

Images