A character terminal telnet protocol security access system and method

Abstract

The invention belongs to the technical field of computer network security, in particular to a Telnet protocol security access system and a Telnet protocol security access method for a character terminal. The system comprises a secure shell housing (SSH) proxy server for executing SSH connection that a client logs into an internal network, checking the identity and selecting equipment to be accessed, and the server is connected to a selected device by means of an appointed login protocol, converting data between encrypted and non-encrypted, monitoring instruction keywords and executing instruction interruption if necessary. Under the condition that the existing network environment and the existing operation habit are not changed as much as possible, the security of a passageway link is guaranteed, and the network equipment to be accessed and a server can be effectively managed.

Description

technical field [0001] The invention belongs to the technical field of computer network security, in particular to a character terminal Telnet protocol security access system and method. Background technique [0002] As far as the applicant knows, in the current computers and networks, there are quite a few network devices and servers that use Telnet to log in. It is well known that Telnet is an insecure remote login protocol (non-encrypted), especially when the management It is even more dangerous when personnel need to access devices on the internal network from the external network. [0003] At present, the more effective solution is to completely replace it with the SSH login protocol. The main disadvantages of this method are as follows: [0004] ⑴It does not support some old network devices. Due to the characteristics of network devices (small devices and single configuration), if the manufacturer does not support SSH when producing this device, it will be more diffic...

AI Technical Summary

Problems solved by technology

[0004] (1) It does not support some old network devices. Due to the characteristics of network devices (small devices and single configuration), if the manufacturer does not support SSH when producing this device, Then it is more difficult to support in the future, and even if it can be upgraded through software, there is also a risk of upgrade failure, especially for some key devices on the network, if there is a problem, the loss will be great.

[0005] (2) For network operating systems such as AIX UNIX, SCO UNIX and other UNIX systems, the SSH service needs to be installed and configured separately, so that the work pressure on the management personnel will also increase. increase, and some systems only support SSH in high-version systems, it is impossible to upgrade the system to install SSH services, adding additional money and time overhead

[0006] It can be seen that it is not so easy to completely replace the remote login of TELNET with SSH in the current network environment. In view of the above situation, there are many intranet The system requires that only TELNET can be connected to the internal network, but this will cause trouble if the relevant maintenance personnel are not on the internal network

Images