Network access control method and system for secure controlled terminal

Abstract

The invention discloses a network access control method for a secure controlled terminal. The method is achieved on the basis of a system, and the system comprises terminal equipment and a security module. The method comprises the following steps that 1, the terminal equipment logs in the security module; 2, the terminal equipment establishes network communication with the security module; 3, identity authentication is conducted on the terminal equipment by the security module, and the step 4 is executed after authentication succeeds; 4, the terminal equipment acquires a network address, wherein a local network address is set as the acquired network address; and 5, the terminal equipment accesses the network. According to the method, a maintenance and debugging interface is shared by various services, the number of needed maintenance and debugging interfaces is decreased maximally, then the convenience to maintenance and debugging personnel for the services is increased, the efficiency of the maintenance and debugging personnel for the services is improved, the maintenance and debugging work cost of the services is reduced, and it is effectively guaranteed that the security among the services is not interfered with one another.

Description

Technical field [0001] The invention relates to a terminal network access method, in particular to a network access control method and system for a safety controlled terminal. Background technique [0002] With the rapid development and popularization of networks, network functions are becoming more and more powerful, and the phenomenon of multi-service sharing networks is becoming more frequent; security between various services is getting more and more attention, and different VLANs are generally used to isolate service applications. Maximize the isolation of various services on the shared network to achieve the effect of non-interference between various services; [0003] However, in the process of sharing the network according to various services, after the network is divided into different VLANs, another problem is brought about, that is, the isolation and authorization of maintenance and debugging. In order to improve the security of the entire system, it is often based on th...

AI Technical Summary

Problems solved by technology

[0003] However, in the process of sharing the network according to various services, dividing the network into different VLANs brings another problem, that is, the isolation and authorization of maintenance and debugging. Reserve the debugging interface, this method wastes the interface, and the security of the reserved debugging and maintenance interface cannot be guaranteed, and the reserved debugging and maintenance interfaces are many and not universal, which will bring great inconvenience to the specific maintenance and debugging work in the future

[0004] In the existing network, according to the debugging and maintenance needs of various services, a certain debugging and maintenance interface is reserved correspondingly according to the type of business. Since not every kind of business is required for debugging and maintenance at the same time, this technical solution brings great The waste of interfaces also brings great inconvenience to the maintenance and debugging personnel of various businesses. It is easy to make mistakes in the specific corresponding interfaces, resulting in high maintenance and debugging costs, and may even lead to certain access security risks.

Images