A control system and method suitable for secure access to intranet data

Abstract

A control system suitable for safe access to intranet data, including a system startup security authentication subsystem and an intranet connection security authentication subsystem. The system startup security authentication subsystem solves the security problems encountered by the terminal equipment during the startup phase. It uses the self-loop encryption of the boot program to prevent it from being tampered with, and sets the hard disk read and write permissions to store the intranet data in isolation. The data security control chip executes the erasure of local sensitive data; the intranet connection security authentication subsystem solves the security problems encountered when the terminal device is connected to the intranet, uses the fixed key of the terminal device to establish an encrypted data channel, and synchronizes the white list of intranet access Audit the behavior of terminal equipment. When the audit fails for many times, the intranet gateway will issue a remote sensitive data erasure command. The present invention provides the specific logic flow and practical strategy of the above system, which can be used in organizations that have high requirements for intranet data security and require terminal equipment to have certain data protection capabilities.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a control system suitable for secure access to intranet data. Background technique [0002] The development of network information technology is gestating a new industrial and technological revolution, but it also brings huge security risks. Hackers have also frequently intruded on smart cars and smart home devices. The Mirai botnet and its variants have controlled tens of millions of smart cameras and smart routers around the world. [0003] At present, physical isolation of internal and external networks is the most commonly used network security defense mode. But this mode cannot be protected according to the security level. Since mobile office has become a daily work mode, departments and industries such as government, medical care, and finance that are not at the highest level of security must access the unit's business intranet to process daily busine...

AI Technical Summary

Problems solved by technology

In view of the high security requirements of the intranet, commonly used network security technologies such as security gateways and VPNs cannot guarantee the security of intranet access

Images