Safety access method and device, electronic equipment and storage medium
By obtaining the switch's interface traffic mirror traffic, extracting and analyzing the traffic address information, determining the traffic direction with the switch's reference address information, and conducting secure access, the problem of excessive demands on switches and high equipment pressure in the prior art is solved, and wider applicability and lower implementation difficulty are achieved.
CN119728600APending Publication Date: 2025-03-28ZHEJIANG UNIVIEW TECH CO LTD
0 Cites 0 Cited by
Patent Information
- Application Number
- CN202311283215.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-09-28
- Publication Date
- 2025-03-28
AI Technical Summary
Technical Problem
In the prior art, the security access plan has too high requirements for the switch hardware and software levels, is difficult to implement, and the access equipment itself is too stressful.
Method used
By obtaining the mirror traffic of the interface traffic at the switch's secure domain interface and/or non-secure domain interface, extracting the traffic address information, and combining the switch's reference address information, the upstream and downstream traffic are determined, thereby performing secure access.
Benefits of technology
It reduces the requirements for switch hardware and software, simplifies the implementation of the security access plan, reduces the pressure on access equipment, and improves the scope of application of safe access equipment.
✦ Generated by Eureka AI based on patent content.
Abstract
The invention provides a security access method and device, electronic equipment and a storage medium, and the method comprises the steps: obtaining mirror image traffic corresponding to interface traffic at a security domain interface and / or a non-security domain interface of a switch, and enabling the mirror image traffic to be obtained through the traffic mirroring of the interface traffic; extracting flow address information from the mirror image flow; determining uplink flow and downlink flow from the mirror image flow based on the flow address information and the reference address information; the reference address information is related to the position of the switch in the user network; according to the method, the uplink flow and the downlink flow in the mirror image flow are safely admitted respectively, so that the flow in different directions is distinguished, the flow is released or blocked, and the defects that the requirements on hardware and software levels of a switch are too high, a safe admission scheme is difficult to implement and admission equipment is too high in pressure at present are overcome; the requirements for software and hardware of the equipment are reduced, the application range of the safety access equipment is widened, and the pressure of the equipment is relieved.
Need to check novelty before this filing date? Find Prior Art