Control system suitable for secure access of intranet data

Abstract

A control system suitable for secure access of intranet data comprises a system starting security authentication subsystem and an intranet connection security authentication subsystem. The system starting safety authentication subsystem solves the safety problem encountered in the starting stage of terminal equipment, self-loop encryption is conducted through a bootstrap program to prevent data from being tampered with, hard disk read-write permission is set for isolated storage of intranet data, and when the terminal equipment fails to be started multiple times, a data safety control chip executes local sensitive data erasure. The intranet connection security authentication subsystem solves the security problem encountered when the terminal equipment is connected with the intranet, an encrypted data channel is established by using a fixed key of the terminal equipment, an intranet access white list is synchronized to audit the behavior of the terminal equipment, and when audit does not succeed for multiple times, an intranet gateway sends a remote sensitive data erasure instruction. The invention provides a specific logic process and a practical strategy of the system, and the system can be applied to an organization which has high requirements on intranet data security and requires terminal equipment to have certain data protection capability.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a control system suitable for secure access to intranet data. Background technique [0002] The development of network information technology is gestating a new industrial and technological revolution, but it also brings huge security risks. Hackers have also frequently intruded on smart cars and smart home devices. The Mirai botnet and its variants have controlled tens of millions of smart cameras and smart routers around the world. [0003] At present, physical isolation of internal and external networks is the most commonly used network security defense mode. But this mode cannot be protected according to the security level. Since mobile office has become a daily work mode, departments and industries such as government, medical care, and finance that are not at the highest level of security must access the unit's business intranet to process daily busine...

AI Technical Summary

Problems solved by technology

In view of the high security requirements of the intranet, commonly used network security technologies such as security gateways and VPNs cannot guarantee the security of intranet access

Images