Server access control system and application

Abstract

The embodiment of the invention discloses a server access control system and application, and relates to the technical field of server security management, and the system comprises a time scheduling module, a firewall control module, a user authority management module, an emergency access exception module and a log recording and auditing module. According to the invention, comprehensive, flexible and intelligent management of the access authority of the server is realized, the time scheduling module enables the system to automatically adjust the access authority of the server according to a preset time rule, and the firewall control module ensures the security of the server by dynamically managing the opening and closing of a network port in combination with an advanced protection strategy. The emergency access exception module processes emergency access in a non-working time period, and the log recording and auditing module realizes fine management of the access authority of the server by recording log information of a key event, so that the problems that the prior art depends on complex script maintenance, is not flexible and intelligent enough, is high in cost and is not easy to maintain can be effectively solved.

Description

Technical Field

[0001] The present invention relates to the technical field of server security management, and in particular to a server access control system and application thereof. Background Art

[0002] In the current field of server security management technology, access control is a key link in ensuring server security. In the prior art, server access control mainly relies on static settings, such as role-based authority control (RBAC) or restricting IP addresses through firewalls.

[0003] However, as cyber attacks become increasingly complex and diverse, existing methods have gradually exposed their limitations, especially the lack of flexibility in the time dimension, which makes it impossible to dynamically adjust access rights according to different time periods, resulting in the server still facing greater security risks during non-working hours.

[0004] For example, SSH services usually need to be open during working hours for administrators to log in remotely for management. However, if the SSH port remains open during non-working hours, the risk of server attacks will increase. Although there are some automated solutions on the market, these solutions often rely on complex script maintenance and are not flexible or intelligent enough to meet the needs of modern server security management. In addition, existing commercial solutions are expensive, and the implementation cost is high for small and medium-sized enterprises with limited resources.

[0005] Therefore, there is a need for a server access control system that can dynamically adjust the access rights of the server according to preset time rules, is low-cost, easy to implement, and has high flexibility. Summary of the invention

[0006] The embodiments of the present invention provide a server access control system to solve the problem that the prior art relies on complex script maintenance, is not flexible and intelligent enough, is costly and difficult to maintain, and is difficult to meet the security management requirements of modern servers. The technical solution is as follows:

[0007] According to one aspect of the present invention, a server access control system includes a time scheduling module, a firewall control module, a user authority management module, an emergency access exception module and a log recording and auditing module; the time scheduling module is used to automatically adjust server access rights according to preset time rules; the firewall control module is used to dynamically manage the opening and closing of network ports; the user authority management module is used to manage user access rights by setting differentiated time policies according to user groups and time periods; the emergency access exception module is used to allow administrators to bypass time control policies in set emergency situations to ensure the manageability of the system; the log recording and auditing module is used to record key events to provide a basis for system security auditing and troubleshooting; the key events include permission changes, user logins, system access and firewall rule adjustments.

[0008] In one of the embodiments, the time scheduling module periodically executes Iptables commands through Cron tasks to automatically open and close ports within a specific time period, and the time scheduling module supports different time period settings for weekdays and weekends.

[0009] In one of the embodiments, the firewall control module ensures the security of the server in different time periods through advanced protection strategies; the advanced protection strategies include IP whitelist, connection rate limitation, protocol type control and state detection connection tracking.

[0010] In one of the embodiments, the user rights management module introduces a dual authentication mechanism during non-working hours.

[0011] In one of the embodiments, the emergency access exception module ensures the flexibility and security of system access through emergency access policies and automatic response mechanisms; the emergency access policies include manual triggering, preset scripts, and dual authentication triggering.

[0012] In one embodiment, the logging and auditing module ensures the efficiency and security of the log system through advanced log management functions; the advanced log management functions include log rotation, remote log storage, real-time monitoring and alarm, and automated analysis and response.

[0013] In one of the embodiments, the logging and auditing module performs remote log storage via syslog and custom log files.

[0014] In one embodiment, the firewall control module ensures the security of the server through security measures; the security measures include setting up whitelists and blacklists of IP addresses, limiting the connection rate of the same IP, performing flow control based on protocol type, and connection tracking combined with state detection.

[0015] According to one aspect of the present invention, an application method of a server access control system includes: when an administrator needs to access a server urgently during non-working hours, an emergency access request is triggered, and the triggering methods include manual triggering, script triggering, and dual authentication triggering; when the system needs to verify the administrator's emergency access rights, if the administrator's triggering method is manual triggering and script triggering, the administrator is required to enter a specific permission password or perform specific identity authentication steps. If the administrator's triggering method is dual authentication triggering, the administrator is required to perform basic identity authentication and additional authentication; the additional authentication includes a mobile phone verification code and biometrics; after the emergency access rights are verified, the system automatically adjusts the firewall rules to open the necessary access rights. Access ports, dynamically add or delete firewall rules by executing Iptables commands to allow or deny specific network traffic; the system writes log information into specific log files, and uses log management tools to centrally manage and record emergency access information; the emergency access information includes access time, triggering method, and operation results; after the firewall rules are adjusted, the administrator connects to the server through SSH or other remote access tools and performs the required maintenance or troubleshooting operations; after the emergency operation is completed, the system automatically or manually restores the original firewall rules to ensure that the security of the server is not affected, and executes the Iptables command again to restore the firewall rules to the state before the emergency access.

[0016] In one of the embodiments, the method also includes: the system collects log information of key events through syslog and recording in custom log files; the key events include permission changes, user logins, system accesses and firewall rule adjustments; if the log storage method is local storage, the log file is saved in a specific directory of the server; if the log storage method is remote storage, the log information is sent to the remote log server using a log management tool; the rotation parameters of the log file are set to rotate and clean up the logs regularly; the rotation parameters include rotation cycle, compression method and number of copies to be retained; real-time monitoring and automatic alarming of log information are performed, and machine learning and automation tools are used to automatically analyze and respond to the log information.

[0017] The beneficial effects brought by the technical solution provided by the present invention are:

[0018] In the above technical scheme, the present invention realizes comprehensive, flexible and intelligent management of server access rights by integrating a time scheduling module, a firewall control module, a user authority management module, an emergency access exception module and a log recording and auditing module. The introduction of the time scheduling module enables the system to automatically adjust the server access rights according to the preset time rules, greatly reducing the workload of the administrator and improving the accuracy of management. The firewall control module ensures the security of the server in different time periods by dynamically managing the opening and closing of network ports and combining advanced protection strategies. The design of the emergency access exception module provides convenience for administrators to access the server in an emergency during non-working hours, while ensuring the security and flexibility of the system. Through manual triggering, script triggering and dual authentication triggering and other methods, the administrator can quickly obtain the necessary access rights to perform maintenance or troubleshooting operations. The log recording and auditing module provides a strong basis for system security auditing and troubleshooting by recording log information of key events, which can ensure the efficiency and security of the log system. Through a highly integrated and intelligent design, fine management of server access rights is realized, the security and flexibility of the system are improved, and the maintenance cost is reduced, thereby effectively solving the problem that the existing technology relies on complex script maintenance, is not flexible and intelligent, is high-cost and difficult to maintain. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in describing the embodiments of the present invention. Obviously, the drawings described below are only some embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without creative work.

[0020] Figure 1 is a structural diagram of a server access control system according to an exemplary embodiment;

[0021] Figure 2 yes Figure 1 A schematic diagram of the interaction between the time scheduling module and the firewall control module in the server access control system in the corresponding embodiment;

[0022] Figure 3 yes Figure 1 Application flow chart of the emergency access exception module in the corresponding embodiment;

[0023] Figure 4 yes Figure 1 Application flow chart of the logging and auditing module in the corresponding embodiment. DETAILED DESCRIPTION

[0024] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be interpreted as limiting the present invention.

[0025] It will be understood by those skilled in the art that, unless expressly stated, the singular forms "one", "said", and "the" used herein may also include plural forms. It should be further understood that the term "comprising" used in the specification of the present disclosure refers to the presence of the features, integers, steps, operations, elements, and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof. It should be understood that when we refer to an element as being "connected" or "coupled" to another element, it may be directly connected or coupled to the other element, or there may be intermediate elements. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The term "and / or" used herein includes all or any unit and all combinations of one or more associated listed items.

[0026] To this end, the present invention provides a server access control system, which realizes comprehensive, flexible and intelligent management of server access rights by integrating a time scheduling module, a firewall control module, a user authority management module, an emergency access exception module and a log recording and auditing module. A server access control system in an embodiment of the present invention can be applied to a variety of scenarios, such as server access control.

[0027] See also Figure 1 , an embodiment of the present invention provides a server access control system.

[0028] In the following method embodiments, for ease of description, the execution subject of each step of the method is taken as an electronic device as an example for illustration, but this does not constitute a specific limitation.

[0029] like Figure 1 As shown, the system includes a time scheduling module (Cron task), a firewall control module (Iptables), a user rights management module (PAM), an emergency access exception module, and a log recording and auditing module.

[0030] Among them, the time scheduling module is used to automatically adjust server access rights according to preset time rules, the firewall control module is used to dynamically manage the opening and closing of network ports, the user authority management module is used to manage user access rights by setting differentiated time policies according to user groups and time periods, the emergency access exception module is used to allow administrators to bypass time control policies in set emergency situations to ensure the manageability of the system, and the logging and auditing module is used to record key events to provide a basis for system security audits and troubleshooting.

[0031] Among them, key events include permission changes, user login, system access and firewall rule adjustments, which are not limited here.

[0032] In a possible implementation, the time scheduling module periodically executes Iptables commands through Cron tasks to automatically open and close ports within a specific time period. The time scheduling module supports different time period settings for weekdays and weekends.

[0033] In one possible implementation, the firewall control module ensures the security of the server in different time periods through advanced protection strategies.

[0034] Among them, advanced protection strategies include IP whitelist, connection rate limitation, protocol type control and state detection connection tracking, which are not limited here.

[0035] In a possible implementation, the user rights management module introduces a dual authentication mechanism during non-working hours.

[0036] In one possible implementation, the emergency access exception module ensures the flexibility and security of system access through emergency access policies and automatic reply mechanisms.

[0037] Among them, emergency access strategies include manual triggering, preset scripts, and dual authentication triggering, which are not limited here.

[0038] In one possible implementation, the logging and auditing module ensures the efficiency and security of the log system through advanced log management functions.

[0039] Among them, advanced log management functions include log rotation, remote log storage, real-time monitoring and alarm, automated analysis and response, etc., which are not limited here.

[0040] In one possible implementation, the logging and auditing module performs remote log storage through syslog and custom log files.

[0041] In a possible implementation, the firewall control module ensures the security of the server through security measures.

[0042] Among them, security measures include setting up whitelists and blacklists for IP addresses, limiting the connection rate of the same IP, flow control based on protocol type, and connection tracking combined with state detection, etc., which are not limited here.

[0043] Specifically, the time scheduling module (Cron task) executes Iptables commands regularly through Cron tasks to realize the automatic opening and closing of ports within a specific time period, support different time period settings for weekdays and weekends, and meet the personalized needs of different enterprises.

[0044] Furthermore, the firewall control module (Iptables) dynamically uses advanced protection strategies to adjust the port opening status according to preset time rules to reduce the attack window.

[0045] Among them, advanced protection strategies include IP whitelist, connection rate limitation, protocol type control and state detection connection tracking, which comprehensively improve the security of the server.

[0046] The User Rights Management Module (PAM) ensures refined rights management based on the different access rights of different user groups in different time periods, and introduces a dual authentication mechanism during non-working hours to further improve security.

[0047] The emergency access exception module includes a variety of emergency access implementation methods: manual trigger, preset script and dual authentication trigger, ensuring flexible and secure access to the system in an emergency. After the emergency access is over, the system can automatically restore the original firewall rules to ensure that security is not affected.

[0048] The logging and auditing module is used for comprehensive event recording: recording key events such as permission changes, user logins, system access, and firewall rule adjustments, supporting subsequent security reviews and problem tracing, and also has advanced log management functions: including log rotation, remote log storage, real-time monitoring and alarms, automated analysis and response, to ensure the efficiency and security of the log system.

[0049] Through the above process, the embodiment of the present invention realizes comprehensive, flexible and intelligent management of server access rights by integrating the time scheduling module, the firewall control module, the user authority management module, the emergency access exception module and the log recording and auditing module. The introduction of the time scheduling module enables the system to automatically adjust the server access rights according to the preset time rules, greatly reducing the workload of the administrator and improving the accuracy of management. The firewall control module ensures the security of the server in different time periods by dynamically managing the opening and closing of the network port and combining the advanced protection strategy. The design of the emergency access exception module provides convenience for the administrator to access the server in an emergency during non-working time periods, while ensuring the security and flexibility of the system. Through manual triggering, script triggering and dual authentication triggering and other methods, the administrator can quickly obtain the necessary access rights to perform maintenance or troubleshooting operations. The log recording and auditing module provides a strong basis for system security auditing and troubleshooting by recording the log information of key events, which can ensure the efficiency and security of the log system. Through the highly integrated and intelligent design, the fine management of server access rights is realized, the security and flexibility of the system are improved, and the maintenance cost is reduced, thereby effectively solving the problem that the existing technology relies on complex script maintenance, is not flexible and intelligent, is high cost and difficult to maintain.

[0050] like Figure 2 As shown, the interaction process between the time scheduling module (Cron task) and the firewall control module (Iptables) in the server access control system in the Linux server automated access control method system based on time control is demonstrated.

[0051] Specifically, the time scheduling module (Cron task) is responsible for automatically triggering specific operations according to preset time rules. In this system, the Cron task is configured to execute Iptables commands at regular intervals to dynamically adjust the access rights of the server.

[0052] The firewall control module (Iptables) is responsible for managing the inflow and outflow of network traffic, especially the opening and closing of specific ports. In this system, Iptables dynamically adds or deletes firewall rules according to the commands triggered by the Cron task, thereby controlling the open status of the port.

[0053] The interaction process between the time scheduling module (Cron task) and the firewall control module (Iptables) may include the following steps:

[0054] The first step is to execute the command to open the SSH port.

[0055] Specifically, the administrator presets a series of time rules in the time scheduling module, and these rules define operations to be performed in different time periods. For example, the rule may specify that the SSH port is opened during 09:00 to 18:00 on weekdays, and is closed during other time periods.

[0056] The second step is to confirm the opening.

[0057] Specifically, when the system time reaches the preset time rule, the Cron task is triggered. The Cron task executes the corresponding Iptables command according to the preset rules. After receiving the command triggered by the Cron task, Iptables performs the corresponding operation. If the command is to open the SSH port, Iptables will add a rule to allow traffic from TCP port 22 (SSH) to enter.

[0058] The third step is to execute the command to close the SSH port.

[0059] Specifically, if the command is to close the SSH port, Iptables will delete or add a rule to deny traffic from port 22 of the TCP protocol. After the Iptables command is executed, the firewall rules are updated and the new rules will take effect immediately to control the in and out of network traffic, especially access to the SSH port.

[0060] Step 4: Confirm the closure.

[0061] Specifically, during the entire interaction process, the system records relevant log information, including the trigger time of the Cron task, the executed Iptables command, the update status of the firewall rules, etc. The log information is of great significance for subsequent security review, problem tracing and anomaly detection.

[0062] In the above process, the firewall control module of the embodiment of the present invention can dynamically adjust the access rights of the server through the preset time rules and the triggering of the Cron task, thereby improving the security and management efficiency of the server.

[0063] like Figure 3 As shown, a flowchart of the application of the emergency access exception module in the server access control system is shown. The application of the emergency access exception module may include the following steps:

[0064] Step 1: The administrator initiates an emergency access request.

[0065] Specifically, when a system administrator needs to access a server urgently during non-working hours, an emergency access request will be triggered. The triggering method can be manual triggering (direct operation through the command line), preset script triggering (executing a pre-written script) or dual authentication triggering (combining PAM and dual authentication mechanism).

[0066] Step 2: Two-factor authentication.

[0067] Specifically, PAM and two-factor authentication mechanisms are combined to ensure the security of emergency access and prevent abuse.

[0068] Step 3: Execute the emergency access script.

[0069] Specifically, emergency access is achieved using preset scripts: pre-written scripts are executed to automatically release and restore firewall rules and record operation logs.

[0070] Step 4: Open the SSH port.

[0071] Specifically, once emergency access rights are verified, the system will automatically adjust firewall rules to open necessary access ports (such as SSH ports).

[0072] Step 5: Complete urgent tasks.

[0073] Specifically, after the firewall rule adjustment is completed, the administrator can perform necessary emergency operations. The administrator connects to the server through SSH or other remote access tools and performs the required maintenance or troubleshooting operations.

[0074] Step 5: Restore the firewall rules.

[0075] Specifically, after the emergency operation is completed, the system automatically or manually restores the original firewall rules to ensure that the security of the server is not affected. By executing Iptables commands, firewall rules are dynamically added or deleted to allow or deny specific network traffic.

[0076] Step 6: Record the log.

[0077] Specifically, the system records detailed information about emergency access, including access time, triggering method, operation results, etc., writes the log information into a specific log file, or uses log management tools such as syslog for centralized management.

[0078] like Figure 4 As shown, the application flow chart of the logging and auditing module in the server access control system is presented.

[0079] Specifically, the system stores log information in a specific log file through syslog, custom logging, etc., and collects log information related to key events such as permission changes, user logins, system access, and firewall rule adjustments.

[0080] Furthermore, the collected log information is stored in a local or remote log server. For local storage, the log file can be saved in a specific directory of the server; for remote storage, tools such as rsyslog can be used to send the log information to a remote log server.

[0081] Furthermore, in order to avoid the log files being too large and causing the disk space to be exhausted, the system needs to rotate and clean up the logs regularly, set the log file rotation cycle, compression method, number of copies to be retained and other parameters, and automatically rotate and clean up the log files.

[0082] Furthermore, the stored log information can be audited and analyzed to identify potential security risks or system problems. Tools such as ELKStack can be used to monitor the log information in real time and automatically send alarms. Machine learning and automation tools can also be used to perform in-depth analysis and anomaly detection on the log information.

[0083] Finally, the results of log audit and analysis can be organized into an audit report for reference and decision-making by system administrators. The audit report can be presented to system administrators in the form of files, emails or web pages, including information such as audit time, audit scope, audit results and recommended measures.

[0084] In the above process, the embodiment of the present invention realizes the automation and dynamic adjustment of access rights through the Cron scheduler, which is in sharp contrast to the existing static setting method and greatly improves the security and management efficiency of the system; combined with the collaborative work of multiple modules, it realizes full coverage of security policies from port management to user authority management, far exceeding the security control capabilities of the existing single module; provides a variety of emergency access methods to ensure the manageability and security of the system in emergency situations, filling the gap in the existing technology; is built based on existing Linux system tools, does not need to rely on expensive commercial solutions, is suitable for use by small and medium-sized enterprises with limited resources, and has significant market competitiveness.

[0085] Compared with the related art, the present invention has the following beneficial effects:

[0086] 1. The present invention realizes comprehensive, flexible and intelligent management of server access rights by integrating a time scheduling module, a firewall control module, a user authority management module, an emergency access exception module and a log recording and auditing module. The introduction of the time scheduling module enables the system to automatically adjust the server access rights according to preset time rules, greatly reducing the workload of the administrator and improving the accuracy of management. The firewall control module ensures the security of the server in different time periods by dynamically managing the opening and closing of network ports and combining advanced protection strategies. The design of the emergency access exception module provides convenience for administrators to access the server in an emergency during non-working time periods, while ensuring the security and flexibility of the system. Through manual triggering, script triggering and dual authentication triggering and other methods, the administrator can quickly obtain the necessary access rights to perform maintenance or troubleshooting operations. The log recording and auditing module provides a strong basis for system security auditing and troubleshooting by recording log information of key events, which can ensure the efficiency and security of the log system. Through a highly integrated and intelligent design, the fine management of server access rights is realized, the security and flexibility of the system are improved, and the maintenance cost is reduced, thereby effectively solving the problems that the prior art relies on complex script maintenance, is not flexible and intelligent, is high-cost and difficult to maintain.

[0087] 2. The present invention improves the security of the server: through dynamic access control in the time dimension, the server access rights are automatically adjusted according to preset time rules, which effectively reduces the attack window. The firewall control module adopts time-based dynamic port management, combined with advanced strategies such as IP whitelist, connection rate limitation, protocol type control and state detection connection tracking, which comprehensively improves the security of the server.

[0088] 3. The present invention improves management efficiency: the system automates and dynamically adjusts access rights without manual intervention, reducing human errors; multiple modules work together to achieve full security policy coverage from port management to user authority management, thereby improving management efficiency.

[0089] 4. The present invention enhances the flexibility of the system: it supports different time periods for weekdays and weekends to meet the personalized needs of different enterprises. Different user groups have different access rights in different time periods, realizing differentiated time strategies based on user groups.

[0090] 5. The present invention provides an emergency access mechanism: in an emergency, it allows administrators to temporarily bypass the time control policy through manual triggering, preset scripts or dual authentication, ensuring the manageability of the system in an emergency; reduces security management costs: built on existing Linux system tools, there is no need to rely on expensive commercial solutions, reducing the security management costs of small and medium-sized enterprises.

[0091] 6. Comprehensive logging and auditing functions of the present invention: The system records all key events, including permission changes, user logins, and firewall rule adjustments, and supports subsequent security reviews and problem tracing; the system architecture is clear, the interaction between modules is simple and clear, and it is easy to implement and maintain.

[0092] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0093] The above descriptions are only some embodiments of the present invention. It should be pointed out that, for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A server access control system, characterized in that: The system includes a time scheduling module, a firewall control module, a user rights management module, an emergency access exception module, and a log recording and auditing module; The time scheduling module is used to automatically adjust the server access rights according to preset time rules; The firewall control module is used to dynamically manage the opening and closing of network ports; The user rights management module is used to set differentiated time policies to manage user access rights according to user groups and time periods; The emergency access exception module is used to allow the administrator to bypass the time control policy in a set emergency situation to ensure the manageability of the system; The logging and auditing module is used to record key events to provide a basis for system security auditing and troubleshooting; the key events include permission changes, user logins, system access and firewall rule adjustments.

2. A server access control system as claimed in claim 1, characterized in that: The time scheduling module implements the automatic opening and closing of ports within a specific time period by regularly executing Iptables commands through Cron tasks. The time scheduling module supports different time period settings for weekdays and weekends.

3. A server access control system as claimed in claim 1, characterized in that: The firewall control module ensures the security of the server in different time periods through advanced protection strategies; the advanced protection strategies include IP whitelist, connection rate limitation, protocol type control and state detection connection tracking.

4. A server access control system as claimed in claim 1, characterized in that: The user rights management module introduces a dual authentication mechanism during non-working hours.

5. A server access control system as claimed in claim 1, characterized in that: The emergency access exception module ensures the flexibility and security of system access through emergency access policies and automatic reply mechanisms; the emergency access policies include manual triggering, preset scripts and dual authentication triggering.

6. A server access control system as claimed in claim 1, characterized in that: The logging and auditing module ensures the efficiency and security of the log system through advanced log management functions; the advanced log management functions include log rotation, remote log storage, real-time monitoring and alarm, and automated analysis and response.

7. A server access control system as claimed in claim 1, characterized in that: The logging and auditing module performs remote log storage through sys log and custom log files.

8. A server access control system as claimed in claim 1, characterized in that: The firewall control module ensures the security of the server through security measures; the security measures include setting up whitelists and blacklists of IP addresses, limiting the connection rate of the same IP, flow control based on protocol type, and connection tracking combined with state detection.

9. The application method of the server access control system according to any one of claims 1 to 8, characterized in that: The method comprises: When an administrator needs to access the server urgently during non-working hours, an emergency access request is triggered. The triggering methods include manual triggering, script triggering, and dual authentication triggering. When the system needs to verify the administrator's emergency access rights, if the administrator's triggering method is manual triggering and script triggering, the administrator is required to enter a specific permission password or perform specific identity authentication steps. If the administrator's triggering method is two-factor authentication triggering, the administrator is required to perform basic identity authentication and additional authentication; the additional authentication includes mobile phone verification code and biometrics; After the emergency access permission is verified, the system automatically adjusts the firewall rules to open the necessary access ports, and dynamically adds or deletes firewall rules by executing Iptab l es commands to allow or deny specific network traffic; The system writes log information into a specific log file and uses log management tools to centrally manage and record emergency access information; the emergency access information includes access time, triggering method, and operation results; After the firewall rules are adjusted, the administrator connects to the server via SSH or other remote access tools and performs the required maintenance or troubleshooting operations; After the emergency operation is completed, the system automatically or manually restores the original firewall rules to ensure that the security of the server is not affected. Execute the I ptab l es command again to restore the firewall rules to the state before the emergency access.

10. The application method of the server access control system according to claim 9, characterized in that: The method further comprises: The system collects log information of key events through sys log and recording in custom log files; the key events include permission changes, user logins, system access and firewall rule adjustments; If the log storage method is local storage, save the log file in a specific directory on the server; if the log storage method is remote storage, use the log management tool to send the log information to the remote log server; Setting the rotation parameters of log files to rotate and clean up logs regularly; the rotation parameters include rotation period, compression method and number of copies to be retained; Carry out real-time monitoring and automatic alarm of log information, and use machine learning and automation tools to automatically analyze and respond to log information.

Images