Data resource security control method in thin client mode

Abstract

The invention belongs to the field of network security, and particularly relates to a data resource security control method in a thin client mode. The data resource security control method in the thin client mode comprises eight subsystems, namely the identity authentication subsystem, the remote application service subsystem, the security label subsystem, the file access control subsystem, the security communication subsystem, the security audit subsystem, the security storage subsystem and the management platform subsystem. Storage and control of files are mainly performed on a background server, the files are stored in different partitions according to user types or security levels of the files, the files are stored and protected, and a server side can not recognize the content of the files. When a user needs to have access to and process the files, the user logs in on a browser, identity authentication is conducted between the user and a server, and then file access connection is established. The files of a thin client are processed on the server side (provided by a physical application server or a virtual application server), no application or agent needs to be installed on the thin client, and interface interoperability is supported by related services released by remote application services.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a data resource security management and control method in a thin client mode. Background technique [0002] With the improvement of informatization popularization, the military, party and government or government agencies have established internal networks. Network erection and information system construction have brought many conveniences to these units, such as resource sharing, office automation, and convenient information transmission. Greatly improved work efficiency. However, with the improvement of the openness of the closed system, more and more information security issues have emerged at the same time. The openness and sharing characteristics of the network make the important information resources distributed in each host in a high-risk state, and these data are vulnerable to various malicious attacks such as illegal monitoring, illegal copying, and illegal acc...

AI Technical Summary

Problems solved by technology

[0006] Although technologies such as trusted computing and host monitoring can improve the security protection capabilities of terminals, in the face of endless network attack methods, diverse usage scenarios, and incompletely controlled end users, malicious programs, network attacks, and management links Vulnerabilities, intentional or unintentional wrong operations by users will cause data loss, leakage or tampering

Images