Comprehensive safety protecting method based on integral network safety service framework

Abstract

The invention discloses a comprehensive safety protecting method based on an integral network safety service framework. The method comprises the following steps of: isolating information of service, control, management, and the like by adopting a classified isolation safety protection technique of network bear information; performing access certification on a terminal device by adopting a safety access protection technique of a user; certifying the validity of interconnected nodes by adopting a safety interconnection protection technique of the node; and certifying the user identity and the service authority by adopting an access control technique of the service. The invention has the advantages that the network communication and safety security are organically integrated to construct a multilevel and all-around comprehensive safety secrecy system, the problems that signaling, management and service plane are not distinguished in the general IP network, network address and user address are not distinguished, range of application and the time of the network resource are not controlled, and the like are solved, thereby effectively overcoming the detects that a superposition-type security secrecy mechanism has low efficiency and incomplete protection, and can not provide stream-oriented rapid safety transmission and the like.

Description

technical field [0001] The invention relates to a network security protection method, in particular to a comprehensive security protection method based on an integrated network security service architecture. Background technique [0002] With the rapid development of IP technology, it has been agreed in the industry to build an integrated network based on IP technology. However, the security problem of general IP network restricts the rapid development of integrated network. [0003] In traditional IP networks, various security and confidentiality devices are generally used to improve the security of the network and services. For example, security equipment such as network isolation, firewall, authentication service, intrusion detection, and vulnerability scanning, as well as security equipment such as link layer, network layer, and application layer. This kind of security protection system built by superimposition improves the security and confidentiality performance of t...

AI Technical Summary

Problems solved by technology

[0008] In order to overcome the above-mentioned shortcomings of the prior art, the present invention provides a comprehensive security protection method based on an integrated network security service architecture, which organically integrates network communication and security, and builds a multi-level, all-round comprehensive security and security system. It solves the problems in the general IP network that the signaling, management, and service planes are not separated, the network address and the user address are not separated, and the scope and time of network resource use are not controlled, effectively avoiding the inefficiency of the superimposed security and confidentiality mechanism , Incomplete protection, unable to provide stream-oriented fast and secure transmission and other defects, can effectively resist counterfeiting, tampering, insertion, replay, denial of service and other network attacks, and protect business and network security