40 results about "Telnet" patented technology

A system can be used to control access to protected resources with respect to remote access of a computing environment. The system can execute a service file to generate a container in a host system based on user input received from a user device to initiate a login session. The service file can correspond to the user input. Subsequent to generating the container, the system can execute a user shell associated with the container to assign the user device to the container. The container can restrict the user device to access a set of predefined resources indicated in the service file. In response to detecting that the login session has ended, the system can remove the container associated with the user device from the host system.

This disclosure provides a method and apparatus for planning Equivalent Multipath (ECMP) load balancing. The method includes: a control device establishing a remote login connection with a device to be configured and setting up Equivalent Multipath (ECMP) to reach the destination device; sequentially traversing each hash algorithm in a hash algorithm list; controlling the device to be configured to switch to the currently traversed hash algorithm via the remote login connection, sending it a hash factor type, a set of candidate source IP addresses, and the IP address of the destination device; controlling the device to be configured to initiate the construction of multiple data packets based on the hash factor type, each with a candidate source IP address and a destination device IP address; causing the device to be configured to calculate and record the transmission ratio of each member path of ECMP associated with each candidate source IP address; and obtaining this ratio via the remote login connection to select service IP addresses for the device to be configured and load balance the data packets sent to the destination device based on the member paths selected by the hash algorithm from ECMP.

The invention belongs to the field of remote management and control, and discloses a remote login and control method and system based on a virtual serial port and an MQTT protocol, and the method comprises the steps: building a safety publishing and subscribing data channel with a pseudo terminal APP through the MQTT protocol based on a unique code and a national secret algorithm of a remote device, generating a working key, and carrying out the data interaction through the key, and meanwhile, a control command and response data are transmitted between the data transfer service and the terminal simulator by utilizing a pre-created virtual serial port, so that remote login and control are realized. The unique code ensures the uniqueness of the equipment identity, and illegal access is prevented; a national cryptographic algorithm such as SM2 replaces traditional RSA, and encryption efficiency and safety balance are optimized; a working key and a secure channel mechanism guarantee data transmission confidentiality; the virtual serial port integrates a terminal access process, and supports potential user authentication and an authority control layer.

The invention discloses a remote office-based permission determination method and device, relates to the technical field of information management, and mainly aims to reduce business operation risks caused by forced disconnection of connection. According to the main technical scheme, the method comprises the following steps: receiving a remote access request sent by a user account through remote login equipment; after the remote access request passes verification, an operation target declaration prompt is initiated to the remote login device, so that a user fills in an operation target; obtaining a pre-operation behavior list and an operation keyword list of the user account in the target business system according to the operation target; and according to the pre-operation behavior list, the operation keyword list, the post information corresponding to the user account and a preset high-risk operation rule, determining a remote operation authority of the user account in the target service system, so that the user account executes an operation corresponding to the remote operation authority in the target service system.

The invention discloses a computer remote login recognition system based on artificial intelligence, relates to the technical field of remote login recognition, and breaks through the three limitations of a traditional scheme through underlying signal capture and multi-modal feature fusion: directly obtaining physical signals of input equipment, avoiding information loss caused by protocol packaging, and improving the recognition efficiency. Microcosmic anomalies of the high-simulation AI attack script are accurately recognized; a low-frequency hidden attack chain is captured in combination with a time sequence graph and a causal model, and the view limitation of single session detection is solved; the robustness of the model is enhanced through adversarial training, and the generalization ability of an unknown attack resisting technique is remarkably improved; meanwhile, the system design gives consideration to the user experience and compliance, the dynamic update of the device fingerprint avoids frequent strong authentication interference, and the federal learning architecture realizes the balance of security and privacy.

A remote authorization method and an electronic device for performing the method are provided. The remote authorization method includes the steps of identifying information of a target device connected to a network, transmitting a request for remote login to the target device to an account server, in response to the remote login request, receiving, from the account server, a remote login code for identifying the remote login request and a remote login method determined according to the information of the target device, requesting a terminal authorization code from the target device by using the remote login code, receiving an input of the terminal authorization code, which is output by the target device according to the remote login method, from a user, transmitting the terminal authorization code to the account server, and receiving a login key for remote login of the target device from the account server, and transmitting the login key to the target device.

The invention provides a method and device for supporting SSH remote login transmission under an RTEMS, and the method comprises the steps: modifying a network protocol stack lwp and a network protocol stack libbsd under the RTEMS, and enabling the network protocol stack lwp and the network protocol stack libbsd to be matched with an SSH; the OpenSSL is adapted under the RTEMS system so as to ensure a confidential mechanism; the method comprises the following steps of: modifying the SSH, replacing a poxAPI which is not supported by the TTEMS with a taskAPI which is supported by the RTEMS, modifying communication logic of an SSHD thread and a sub-thread at an SSHServer end in a kernel of the RTEMS, so that the Client, the SSHD and the sub-thread of the SSHD respectively construct a two-layer socket communication architecture, and remote login and file transmission are realized. According to the invention, when remote communication is carried out in an open and unsafe network environment, the confidentiality and integrity of data can be protected, and identities of both communication parties can be verified, so that a safe and reliable remote management and data transmission environment is constructed.

The application discloses a kind of Web end remote access container method, system, terminal and server, the method includes: Web terminal receives the remote login container request of user;When the user identity is verified by back-end server, obtain user role and the right of operating container;When confirming user role and authority, feedback login success notice;When terminal receives notification, container information and connection request are sent to back-end server;Server establishes connection with terminal;According to container information, target container is inquired;Terminal receives user operation target container command and sends to server;When the role of current user has the operation authority of the command according to the relationship of role and operation command authority detection, the command is sent to the container, so that container executes the command and feedback execution result to server.The application can flexibly and safely control the access authority of user to command operation in container according to the role of user, improve system flexibility and security.

The invention discloses a power system data acquisition method and system, and the system comprises a field acquisition device which mainly comprises a field operation computer, a multi-port RS485 serial server, an RS485 bus and a field end device; the server side is composed of a server and total monitoring software, the operation condition of each device of each station is monitored through the software, the server architecture adopts hardware and software dual-redundancy configuration, when each hard disk or hardware in each server fails, data of the other hard disk can be recovered to operate, and reliable guarantee is provided for data safety; and the work station is remotely logged in the server by a computer, monitors the operation conditions of each site and each device by adopting a paging browsing mode, and masters the operation data of the devices in real time. By means of software redundancy, 24-hour uninterrupted operation of the whole system is guaranteed, and safety guarantee is provided; and by utilizing a big data analysis technology, hidden defects can be quickly identified and solved, and the stability of equipment is enhanced.

The application provides a method for dynamically obtaining IP under unopened DHCP, comprising the following steps: S1, adding a socket process for monitoring the 67 port; S2, determining whether the ClientMACaddress in the dhcpdiscover message is 0005ca112233, if yes, then starting the relevant action, otherwise discarding; S3, if the ClientMACaddress is determined as 0005ca112233, then automatically setting the IP address of the LAN port and starting the dhcp and telnet or SSH server, and simultaneously closing the debug_dhcp process; S4, through the execution of steps S1-S3, the device normally interacts through the DHCP protocol; S5, after the PC obtains the IP, the telnet / SSH is performed to the device for debugging; S6, after the debugging is completed, the corresponding function is closed, and the original state is restored. Beneficial effects: the method can connect the device to perform the telnet debugging under the condition that the DHCP is not opened on the device and no IP is configured, the original intention of the customer for the network security is considered, the relevant function is automatically started only during the debugging, and the function is automatically closed after the debugging is completed.

This application discloses an information collection method, apparatus, device, and storage medium applied to Nginx servers. Multiple Nginx servers are distributed and deployed in an Nginx cluster, with at least one load balancer (LB) Nginx namespace deployed on each Nginx server. The method includes: when etcd is updated, obtaining all LB configuration information from etcd and creating a task queue for all LBs to perform collection tasks; based on all LB configuration information, determining when the current Nginx server deploys an LBi Nginx namespace, and obtaining the first collection time of LBi from the task queue; based on the first collection time, collecting traffic forwarding volume from the LBi Nginx namespace. This distributed and decentralized approach to collecting LB traffic forwarding volume avoids the problems of remote login failures, disconnections, and timeouts that occur when a centralized monitoring node cannot remotely log in to an unspecified number of Nginx servers during centralized information collection, ensuring the integrity and accuracy of the collected traffic forwarding volume information (i.e., outbound traffic information).

The invention relates to the technical field of NAS equipment, and particularly discloses an automatic test method for testing the network connectivity of NAS equipment, which comprises the following steps: starting a test system through desktop end software, realizing the separation of a host process and a rendering process, initializing a Telnet client in the host process to establish communication connection with the NAS equipment, and starting the test system through desktop end software; the stability of the Telnet client in the network connection establishing process is analyzed by combining historical performance data of the Telnet client, namely, the performance of the Telnet client in the connectivity testing process can be analyzed, and then detailed data of the NAS equipment testing result in the testing result is corrected by combining the data. According to the method, the test data of the NAS equipment can be optimized, so that the data is closer to a true value, and finally, the connection performance of the NAS equipment can be accurately analyzed based on the optimized test data, so that the accuracy of the evaluation result of the network connectivity of the NAS equipment is improved, and the optimization of the network connectivity test method of the NAS equipment is realized.

The invention discloses a drilling platform control system based on an industrial network. The drilling platform control system comprises a transmission device, the industrial network, an access network, a remote login safety protection module, a management personnel authorization and identification module, an abnormal behavior monitoring and alarm module, an industrial control network, an industrial Internet of Things, a firewall, a drilling platform device and a platform monitoring device. The transmission equipment is wirelessly connected with the access network and the industrial network, and the access network is wirelessly connected with the corresponding access equipment; the industrial network is connected with the industrial control network and the industrial internet of things, a firewall is arranged between the industrial network and the industrial internet of things, and the industrial internet of things is connected with the platform monitoring equipment; the industrial control network is connected with drilling platform equipment, and a remote login safety protection module and a management personnel authorization and identification module wirelessly connected with the remote login safety protection module are connected between the industrial control network and the drilling platform equipment; and the remote login safety protection module is also wirelessly connected with the abnormal behavior monitoring and alarming module, so that the safety problem of the drilling platform control system is solved.

The invention provides a telnet login method based on remote verification, which is applied to a network system with an ONU (Optical Network Unit), a user side and a password server, and comprises the following steps: the user side sends a remote login request to the ONU, and the ONU generates a random telnet password based on the remote login request; encrypting the random telnet password through a public key encryption algorithm to obtain an encrypted telnet password, and directly transmitting the encrypted telnet password to a password server or echoing the encrypted telnet password to a user side; the user side sends a password query request to a password server, and the password server decrypts the encrypted telnet password based on the password query request to obtain a real telnet password; the user side logs in the ONU based on the real telnet password, and telnet login is completed. According to the method and the device, the problems that in the prior art, a fixed password is adopted, so that password leakage is easily caused, large potential safety hazards exist in gateway telnet login, and safe and stable operation of the gateway cannot be guaranteed are solved.

The application discloses a live broadcast multi-opening method and system based on a remote GPU desktop, relates to the network live broadcast technical field, and solves the technical problem that multiple anchors are difficult to use the same IP to perform live broadcast, which influences live broadcast flexibility and live broadcast effect. The method comprises the following steps: creating multiple users with administrator permissions; starting a freeRDP client to simultaneously log in multiple users; acquiring the type of a Windows system supporting coding and decoding; adding a Windows system supporting coding and decoding field in a game service manager, setting coding and decoding configuration information by using an audio and video streaming tool, and creating a game audio and video streamer; copying the compiled game audio and video streamer, and setting different IP addresses for each user; starting game streaming in each freeRDP window to perform game live broadcast. The application realizes live broadcast multi-opening by remotely logging in through the freeRDP client, and realizing that multiple anchors have different proxy IP addresses through the audio and video configuration tool, the game service manager and the audio and video streaming tool.

The present invention provides a control method and device for remote login. Among them, the method includes: receiving an operation command sent by a client through an application; determining whether the application is started by logging in through the shell of a third-party telnetd; in the case where the determination result is yes, controlling the application started on the shell and responding to the operation command, which can solve the problem in the related art that differential control cannot be performed on telnet login users. By designing a remote login APP, the ability for third-party users to have telnet login to the device is realized, and differential control different from privileged users can be performed on the third-party remote login shell.

This disclosure relates to a joint debugging method and apparatus for JTAG and OpenOCD based on the UVM platform. The method includes: importing a JTAG DPI C function into the UVM verification platform; the JTAG DPI C function is used to control the interaction between OpenOCD and the JTAG interface of the UVM verification platform; instantiating a JTAG DPI module on the UVM verification platform and connecting the JTAG interface to the device under test; configuring the OpenOCD in remote-bitbang mode according to the OpenOCD configuration file; the OpenOCD configuration file includes: remote host address, remote host port number, and remote-bitbang interface; converting the JTAG timing packets received by the JTAG DPI module into simulation test stimuli for interaction with the compiler simulator of the UVM verification platform through the TCP Socket interface and the Direct Programming Interface (DPI); starting the OpenOCD, setting the preset port of the OpenOCD to the telnet connection port, and sending debugging commands to the device under test through the preset port.

The invention is a method for assessing security vulnerabilities on network devices using protocols such as SSH and Telnet and ensuring that hardening operations are carried out collectively (remediation) without entering any commands, characterized by the fact that assessment and hardening processes are carried out by running codes / scripts created in accordance with the target network device on the target device.

The invention discloses a method and a system for testing a portable operation and maintenance gateway of an electric power monitoring system, and the method comprises the steps: constructing simulation clients and a server which support multiple key operation and maintenance protocols, such as SSH, Telnet, DL / T 634.5101, Q / GDW 273, DL / T 634.5104 and the like, and creating a corresponding high-risk operation instruction set or control instruction set in each simulation client; wherein the SSH and Telnet simulation server side is configured to only receive an instruction but not execute an action; the DL / T 634.5101 simulation server side, the Q / GDW 273 simulation server side and the DL / T 634.5104 simulation server side carry out communication response according to the protocol stipulation, but the power equipment operation is not actually executed; by constructing a multi-protocol simulation test environment, a unified test means is provided for evaluating the operation and maintenance gateway, and the problem of verification of functional integrity, protocol compatibility and security policy consistency of the gateway is effectively solved.

The application provides a function test method and device, electronic equipment and a storage medium, and relates to the technical field of computers. The method is applied to a server, and the specific implementation scheme is as follows: an access request sent by a client is received, a test script under a preset directory in the server is acquired according to the access request, then a system operation function is called according to the test script to execute a system command in the access request, and the execution result of the acquired command is returned to the client through an access response, so that the function test is realized. Thus, the server system command can be executed without remotely logging in the server, the execution result of the command is returned to the client through the access response, and the test function is realized.

The invention discloses a cross-security domain data transmission method and device based on a Telnet communication protocol, electronic equipment and a storage medium, and belongs to the technical field of power grid information security, and the method comprises the following steps: carrying out data tamper-proof processing according to a hash value of a Telnet protocol message; and performing SM4 encryption processing on the Telnet protocol message, signing the Telnet protocol message after the SM4 encryption processing, obtaining a to-be-transmitted encrypted data message, and sending the to-be-transmitted encrypted data message to a corresponding target device, so that the target device performs data integrity verification and signature legality verification on the encrypted data message, and sends the to-be-transmitted encrypted data message to the corresponding target device. And after the verification is passed, decrypting the encrypted data message, and converting the encrypted data message into a preset standard message format, so that the problems that an effective encryption and authentication mechanism is lacked and the data is extremely easy to eavesdrop and tamper in the transmission process in the prior art can be solved.

Embodiments of the present application provide a network device detection method, device, equipment, storage medium and program product, and specifically relate to the technical field of computers. The method comprises: sending a detection command generated based on a user's command input operation on a remote login client to a network device; receiving an execution result generated based on the detection command returned by the network device; in a case where a rich echo information function is in an open state, extracting key information from the execution result and obtaining associated information of the key information; and displaying the execution result and the associated information. The method is used to achieve the effect of providing rich echo information in the troubleshooting process of the network device and improving troubleshooting efficiency.

The invention discloses a method, device and system for enhancing safety of a Telnet server, and belongs to the field of network safety. The method comprises the following steps: acquiring a remote session between a client and a server, and carrying out legality detection on a user name; if the login password is legal and the login is successful, carrying out security detection on the login password based on the complexity of the password and the character repetition degree; and if the password accords with the security rule, performing keyword filtering on each remote session sent to the server by the client so as to block the malicious command. According to the scheme, the security detection is performed on the login password, so that the security of the password is improved, and misoperation is prevented; in addition, illegal user access can be prevented, damage of malicious commands to remote server data is blocked, and the safety of the remote server is improved.

The application provides a method, system, device and storage medium for disabling remote login of a root account, the method comprising: modifying a remote login configuration file of the root account to reject remote login of the root account; modifying UID and GID of an icfs account to modify the authority of the icfs account to a normal account, and modifying a login file of the icfs account to allow remote login of the icfs account; copying an environment file under a root account directory to an icfs account directory, and modifying the environment file to adapt to the icfs account; and setting the icfs account to allow use of a process management command and restart an sshd service. The application realizes disabling ssh remote login of a root account of a storage server node, and simultaneously realizes ssh remote login of an icfs account of a storage system.

The application discloses a kind of satellite system switching fault intelligent diagnosis methods of space-ground link cooperation, belong to satellite communication technical field.By multi-source heterogeneous data acquisition module (support SNMP / Telnet protocol and equipment proprietary protocol) real-time monitoring space-ground two channels: space-based link (satellite ABIS equipment E1 interface, main station resource pool) and ground-based link (BTS equipment physical layer state, data layer signaling flow / time slot configuration, and ground BSC port alarm);Innovative fusion rule base engine and end-to-end topology tracing model: consistency check engine dynamically analyzes the three-dimensional mapping conflict of physical port, network management configuration, BSC link, automatically generates port modification instruction;Hidden alarm detection module is based on Telnet instruction penetrating scanning underlying register (such as standard query instruction).The application shortens fault location time, improves operation and maintenance efficiency and implicit fault detection rate, directly hits pain point and builds technical barrier.

The present disclosure provides a device operation and maintenance method, a data forwarding method, a system and an electronic device, and relates to the technical field of device maintenance. The method comprises the following steps: in response to an operation and maintenance request initiated by a master device for a controlled device, obtaining a data stream of a visual interface of the controlled device through an audio and video transmission interface of the controlled device; and performing device operation and maintenance on the controlled device based on an operation and maintenance operation initiated by the master device for the data stream. The present disclosure aims to solve the problem that in the traditional remote operation and maintenance mode, the network or system of the device itself fails, and the web page of the faulty device cannot be remotely logged in for device maintenance.

The invention relates to the technical field of network security, and provides a security reinforcement method and device for secure shell protocol remote login. The method comprises the following steps: determining to-be-authenticated information corresponding to a secure shell protocol remote login request; the to-be-authenticated information comprises a first ciphertext obtained by encrypting first content input by a user according to the first key; acquiring pre-configuration information from a corresponding domain controller by using the bastion host, so as to judge the validity of the to-be-authenticated information by comparing the first ciphertext with a second ciphertext in the pre-configuration information; the second ciphertext is obtained by encrypting a second content having a corresponding relationship with the first content according to a second key; the fortress machine does not store the pre-configuration information, and deletes the obtained pre-configuration information after the validity judgment of the to-be-authenticated information is completed; and if the to-be-authenticated information is valid, performing living body authentication on the user to realize safe remote login. Through the embodiment of the invention, the security of remote login of the secure shell protocol can be enhanced.

The application provides a remote login brute force behavior monitoring method and device, electronic equipment and a storage medium, and relates to the technical field of security protection, and the method comprises the following steps: obtaining target information corresponding to remote login through an ETW mechanism of an operating system deployed on the electronic equipment, wherein the target information comprises at least two of the following: login behavior information, RDP connection information and network connection behavior information; and monitoring whether remote login brute force behavior exists based on at least two target information in the login behavior information, the RDP connection information and the network connection behavior information. The application can obtain at least two target information in the login behavior information, the RDP connection information and the network connection behavior information based on the ETW mechanism, and jointly monitor whether remote login brute force behavior exists, thereby improving the accuracy of remote login brute force behavior monitoring.

The present invention relates to the field of network security technology, and discloses a method, a system and a storage medium for enhancing the security of a bastion host. The method disperses the permissions of the bastion host, enables a special administrator account to perform SSH login, and restricts it to perform relevant operations only through the bastion host console. When logging in to the administrator account for the first time, only partial permissions can be obtained, and only when logging in to the administrator account for the second time can the background be entered to obtain more permissions, realizing secure remote login to the bastion host through SSH, and solving the technical problems of insufficient security of the remote login bastion host system and poor usability of disabling remote login to the bastion host in the prior art.

The invention relates to the technical field of data security and encryption, in particular to a data security protection method and device and a storage medium, and can solve the problem that security risks during key exchange in ssh communication cannot be protected in the prior art to a certain extent. Therefore, the key is protected from being intercepted and illegally used by a man-in-the-middle attack means when the key is exchanged for the first time, and the safety of data is ensured. The data security protection method comprises the following steps: establishing an encryption channel using a one-time password; the six-bit short password is stored in a remote host in advance in the form of a configuration file to generate a secret key; a one-time six-bit short password is configured, and an encryption channel and a secret key are encrypted; transmitting the secret key to the client through an encryption channel; deploying a plurality of one-time passwords to complete the deployment of the secret key; setting SSH remote login protection based on the password; and setting SSH remote login protection based on the secret key.