Safety operation and maintenance management method based on computer platform

Abstract

The invention belongs to the technical field of computer platforms, and particularly relates to a security operation and maintenance management method based on a computer platform, which comprises the following steps: (1) numbering each computer equipped in a computer room, and setting a login entry interface in each numbered computer, wherein the login mode of the login entry interface is employee job number login; and (2) a management agent terminal is installed in the computer system in the step (1), a password operation chip and a storage space are arranged in the management agent terminal, and a network access tracking terminal is arranged in the storage space. A user can create an operation and maintenance right approval application through a computer, at the moment, the management agent terminal calls an internal cryptographic operation chip, generates a management agent authentication key and applies for a management agent authentication certificate from the operation and maintenance server, and after the user passes authentication, the application mode of the operation and maintenance right approval application can be selected. And a manager can conveniently manage and control the use authority of the computer.

Description

Technical Field

[0001] The present invention belongs to the technical field of computer platforms, and in particular relates to a security operation and maintenance management method based on a computer platform. Background Art

[0002] A computer, commonly known as a PC, is a modern electronic computing device used for high-speed computing. It can perform numerical calculations, logical calculations, and also has a storage and memory function. It is a modern intelligent electronic device that can run according to a program and automatically and rapidly process a large amount of data. A computer is mainly composed of a hardware system and a software system together. A computer is a modern intelligent product. With the development of technology and the growth of the economy, the price of computers has gradually decreased. Nowadays, computers have become one of the indispensable electronic devices in people's work, study, and entertainment, and are widely used.

[0003] During the process of a computer connecting to the network, situations such as hacker attacks and virus and Trojan horse attacks often occur, especially in multiple computers in Internet cafes, offices, and school computer rooms. In order to protect the normal operation of the computer network platform, it is necessary to perform regular operation and maintenance management on the computer platform. However, for the common security operation and maintenance management methods of computer platforms on the market currently, operation and maintenance management personnel need to maintain multiple computers one by one, with a long maintenance cycle, a large workload, and a heavy burden. Therefore, there is an urgent need to improve the existing security operation and maintenance management method based on a computer platform and provide a security operation and maintenance management method based on a computer platform. Summary of the Invention

[0004] The purpose of the present invention is to provide a security operation and maintenance management method based on a computer platform that is reasonably designed, simple in structure, convenient for operation and maintenance management, and easy to manage, aiming at solving the problems in the prior art that operation and maintenance management personnel need to maintain multiple computers one by one, with a long maintenance cycle, a large workload, and a heavy burden.

[0005] In order to achieve the above purpose, the present invention adopts the following technical solutions: A security operation and maintenance management method based on a computer platform, which includes Step (1): Number each computer equipped in a computer room, and set a login entry interface in each numbered computer, where the login method of the login entry interface is employee ID login; Step (2): Install a management agent terminal in the computer system in Step (1). The management agent terminal is built with a password operation chip and a storage space, and a network access tracking terminal is built in the storage space; Step (III): The network access tracking terminal in Step (II) is used to track the computer network access process during the operation of the network retrieval software; Step (IV): An operation and maintenance server is installed in the computer. The operation and maintenance server is used to send identity authentication to the management agent terminal in Step (II) according to the operation and maintenance instruction. The management agent terminal is used to verify the validity of the request information. After the verification passes, it initiates a connection to the operation and maintenance server to establish a secure link between the management agent terminal and the operation and maintenance server for the operation and maintenance management of the computer platform: Step (V): During the use of the computer network, the network access tracking terminal is started by the network retrieval software in each computer to obtain real-time tracking of all web pages accessed by the target computer. A system detection software is installed in each computer. When the network retrieval software is used to access the computer, the system detection software in its computer is automatically turned on; Step (VI): Create an operation and maintenance permission approval application, and then select the applicable mode of the operation and maintenance permission approval application.

[0006] As a preferred implementation manner, the management agent terminal is an independent password terminal software and performs login operations through a dedicated account and password.

[0007] As a preferred implementation manner, the applicable modes of the operation and maintenance permission approval application in Step (VI) include a first scenario mode, a second scenario mode, and a third scenario mode.

[0008] As a preferred implementation manner, when the applicable mode of the operation and maintenance permission approval application is the first processing mode, a first operation and maintenance permission acquisition application is submitted through the management agent terminal. When the application for obtaining terminal management authorization passes, the computer can enter the first processing mode.

[0009] As a preferred implementation manner, when the applicable mode of the operation and maintenance permission approval application is the second processing mode, a second operation and maintenance permission acquisition application is submitted through the management agent terminal. When the application for obtaining terminal management authorization passes, the computer can enter the second processing mode, and the permissions that can be run in the second processing mode are more than those in the first processing mode.

[0010] As a preferred implementation manner, the third processing mode is an emergency cut-off takeover mode. When the system detection software monitors that the computer has a virus and system failure anomalies, the operation and maintenance server of the computer automatically generates an operation failure emergency code and sends it to the terminal processing device.

[0011] As a preferred implementation manner, the management agent terminal calls an internal password operation chip to generate a management agent authentication key and applies for a management agent authentication certificate from the operation and maintenance server.

[0012] As a preferred embodiment, the operation and maintenance server issues a management agent authentication certificate and sends it to the management agent device.

[0013] In the solution of the present invention: By installing a management agent terminal in the computer system, the user can obtain a management agent authentication certificate from the administrator. Moreover, a network access tracking terminal is built into the storage space of the management agent terminal, which can detect and track the user's network access. When the network retrieval software accesses the computer network, the system detection software in the computer is automatically turned on, which can automatically supervise the computer cloud platform and is also convenient for the administrator to monitor, making the operation and maintenance management of the computer more convenient. The user can create an operation and maintenance permission approval application through the computer. At this time, the management agent terminal calls the internal password operation chip and generates a management agent authentication key. At the same time, it applies for a management agent authentication certificate from the operation and maintenance server. After the user passes the authentication, the applicable mode of the operation and maintenance permission approval application can be selected, which is convenient for the administrator to control the usage permissions of the computer and makes the management more convenient. Specific embodiments

[0014] The following described embodiments are only a part of the embodiments of the present invention and do not represent all embodiments consistent with the present invention. The exemplary embodiments are described as follows: The security operation and maintenance management method of the present invention based on a computer platform includes Step (1): Number each computer equipped in the computer room and set a login entry interface in each numbered computer, where the login method of the login entry interface is employee ID login; Step (2): Install a management agent terminal in the computer system in step (1). The management agent terminal is built with a password operation chip and a storage space, and a network access tracking terminal is built into the storage space; Step (3): The network access tracking terminal in step (2) is used to track the computer network access process when the network retrieval software is running; Step (4): An operation and maintenance server is installed in the computer. The operation and maintenance server is used to send identity authentication to the management agent terminal in step (2) according to the operation and maintenance instruction. The management agent terminal is used to verify the validity of the request information. After passing the verification, it initiates a connection to the operation and maintenance server to establish a secure link between the management agent terminal and the operation and maintenance server for the operation and maintenance management of the computer platform: Step (V): During the use of the computer network, the network access tracking terminal is activated by the network retrieval software in each computer, and all web pages accessed by the target computer can be obtained in real time. The system detection software is installed in each computer, and when the network retrieval software is used to access the computer, the system detection software in the computer is automatically turned on; Step (VI): Create an operation and maintenance permission approval application, and then select the applicable mode of the operation and maintenance permission approval application.

[0015] As a preferred embodiment, on the basis of the above structure, further, the management agent terminal is an independent password terminal software, and the login operation is performed through a dedicated account and password.

[0016] As a preferred embodiment, on the basis of the above structure, further, the applicable modes of the operation and maintenance permission approval application in step (VI) include the first scenario mode, the second scenario mode, and the third scenario mode.

[0017] As a preferred embodiment, on the basis of the above structure, further, when the applicable mode of the operation and maintenance permission approval application is the first processing mode, a first operation and maintenance permission acquisition application is submitted through the management agent terminal. When the application for obtaining terminal management authorization is passed, the computer can enter the first processing mode.

[0018] As a preferred embodiment, on the basis of the above structure, further, when the applicable mode of the operation and maintenance permission approval application is the second processing mode, a second operation and maintenance permission acquisition application is submitted through the management agent terminal. When the application for obtaining terminal management authorization is passed, the computer can enter the second processing mode, and the permissions that can be run in the second processing mode are more than those in the first processing mode.

[0019] As a preferred embodiment, on the basis of the above structure, further, the third processing mode is an emergency cut-off takeover mode. When the system detection software monitors that the computer has a virus and system failure anomalies, the operation and maintenance server of the computer automatically generates an operation failure emergency code and sends it to the terminal processing device.

[0020] As a preferred embodiment, on the basis of the above structure, further, the management agent terminal calls the internal password operation chip to generate a management agent authentication key and applies for a management agent authentication certificate from the operation and maintenance server.

[0021] As a preferred embodiment, on the basis of the above structure, further, the operation and maintenance server issues a management agent authentication certificate and sends it to the management agent device.

[0022] The working principle of the present invention is as follows: In use, first, by installing a management agent terminal in the computer system, the user can obtain a management agent authentication certificate from the administrator. Moreover, a network access tracking terminal is built into the storage space of the management agent terminal, which can detect and track the user's network access. When the network retrieval software accesses the computer network, the system detection software in the computer is automatically activated, which can automatically supervise the computer cloud platform and is also convenient for the administrator to monitor, making the operation and maintenance management of the computer more convenient; The user can create an operation and maintenance permission approval application through the computer. At this time, the management agent terminal calls the internal password operation chip and generates a management agent authentication key. At the same time, it applies to the operation and maintenance server for a management agent authentication certificate. After the user is authenticated, the applicable mode of the operation and maintenance permission approval application can be selected, which is convenient for the administrator to control the usage rights of the computer and makes management more convenient.

[0023] The above are only the preferred specific embodiments of the present invention and are not intended to limit the protection scope of the present invention; any equivalent changes, modifications, substitutions, and variations made by those skilled in the art in the technical field of the present invention based on the concept of the present invention through logical analysis, reasoning, or limited experiments shall fall within the protection scope determined by the claims.

Claims

1. A security operation and maintenance management method based on a computer platform, including Step (1): Number each computer equipped in the computer room, and set a login entry interface in each numbered computer. The login method of the login entry interface is employee ID login; Step (2): Install a management agent terminal in the computer system in Step (1). The management agent terminal is built-in with a password operation chip and a storage space, and a network access tracking terminal is built-in in the storage space; Step (3): The network access tracking terminal in Step (2) is used to track the computer network access process when the network retrieval software is running; Step (4): An operation and maintenance server is installed in the computer. The operation and maintenance server is used to send identity authentication to the management agent terminal in Step (2) according to the operation and maintenance instruction. The management agent terminal is used to verify the validity of the request information. After the verification is passed, a connection is initiated to the operation and maintenance server to establish a secure link between the management agent terminal and the operation and maintenance server for the operation and maintenance management of the computer platform: Step (5): During the use of the computer network, the network access tracking terminal is started by the network retrieval software in each computer, and all web pages accessed by the target computer can be tracked and obtained in real time. A system detection software is installed in each computer. When the computer access is performed using the network retrieval software, the system detection software in the computer is automatically turned on; Step (6): Create an operation and maintenance permission approval application, and then select the applicable mode of the operation and maintenance permission approval application.

2. The security operation and maintenance management method based on a computer platform according to claim 1, characterized in that: The management agent terminal is an independent password terminal software and is logged in through a dedicated account and password.

3. A security operation and maintenance management method based on a computer platform according to claim 1, characterized in that: The applicable modes of the operation and maintenance permission approval application in Step (6) include the first scenario mode, the second scenario mode, and the third scenario mode.

4. A security operation and maintenance management method based on a computer platform according to claim 3, characterized in that: When the applicable mode of the operation and maintenance permission approval application is the first processing mode, submit a first operation and maintenance permission acquisition application through the management agent terminal. When the application for obtaining terminal management authorization is passed, the computer can enter the first processing mode.

5. A security operation and maintenance management method based on a computer platform according to claim 3, characterized in that: When the applicable mode of the operation and maintenance permission approval application is the second processing mode, submit a second operation and maintenance permission acquisition application through the management agent terminal. When the application for obtaining terminal management authorization is passed, the computer can enter the second processing mode, and the permissions that can be run in the second processing mode are more than those in the first processing mode.

6. The security operation and maintenance management method based on a computer platform according to claim 3, characterized in that: The third processing mode is an emergency cut-off takeover mode. When the system detection software monitors that the computer has a virus and system failure anomalies, the operation and maintenance server of the computer automatically generates an operation failure emergency code and sends it to the terminal processing device.

7. A security operation and maintenance management method based on a computer platform according to claim 1, characterized in that: The management agent terminal calls the internal password operation chip to generate a management agent authentication key and applies for a management agent authentication certificate from the operation and maintenance server.

8. A security operation and maintenance management method based on a computer platform according to claim 7, characterized in that: The operation and maintenance server issues a management agent authentication certificate and sends it to the management agent device.