CN102946383B - The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic - Google Patents

The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic Download PDF

Info

Publication number
CN102946383B
CN102946383B CN201210409474.2A CN201210409474A CN102946383B CN 102946383 B CN102946383 B CN 102946383B CN 201210409474 A CN201210409474 A CN 201210409474A CN 102946383 B CN102946383 B CN 102946383B
Authority
CN
China
Prior art keywords
party
information
interface
instruction
amendment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201210409474.2A
Other languages
Chinese (zh)
Other versions
CN102946383A (en
Inventor
黄舰
梁宇杰
赵昱
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhuhai Seal Interest Technology Co Ltd
Original Assignee
Zhuhai Juntian Electronic Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhuhai Juntian Electronic Technology Co Ltd filed Critical Zhuhai Juntian Electronic Technology Co Ltd
Priority to CN201210409474.2A priority Critical patent/CN102946383B/en
Publication of CN102946383A publication Critical patent/CN102946383A/en
Application granted granted Critical
Publication of CN102946383B publication Critical patent/CN102946383B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Abstract

The present invention proposes a kind of method of remote inquiry based on third party's common interface, amendment virus characteristic, comprise the following steps: by the information of third party's public correspondence interface from outer network termination, described outer network termination is arranged in outer net; Monitor the information of reception in real time or termly; After monitoring the new information received, sender's account of the information of transmission, reserved problem, command content are verified successively, verifies if double unsuccessfully, then can automatically disconnect this response and report to the police, after complete verification passes through, carry out next step; The instruction comprised in execution information; The execution result of instruction is sent to outer network termination by described third party's public correspondence interface.The present invention is based on third party's common communication interface, as mail interface, instant chat software interface, short message interface etc., effectively solve the problem that engineer also conveniently can obtain the authority operating Intranet correlation function in outer net environment.

Description

The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic
Technical field
The present invention relates to technical field of network security, relate generally to the method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic.
Background technology
As everyone knows, current internet security situation also allows of no optimist, and safe art of attack and defense is constantly perfect, ripe in constantly resisting, it is no matter the response to new virus feature, or the amendment to known viruse feature, who has won the time, and who has just grasped absolute right of speech.
All so pay attention to the situation of network security in each company under, the barrier between Inside and outside network, has become indispensable one defence line ensureing intranet security.Most company, when some functions of operation, requires that Intranet authority is the link that must verify, and especially for internet security enterprise, grasped life especially and killed authority, the amendment of each little virus characteristic, issue will strictly be audited especially; But in time valuable Attack Defence industry like this, once have left company Intranet, loaded down with trivial details step and checking are just needed for the engineer in outer net, just likely carry out the associative operation to virus characteristic.And these waste most of the time.
Prior art is use VPN to be connected to Intranet environment mostly, but this is higher to the requirement of engineer, not only needs terminal, and also need the network of VPN token, enough bandwidth, Intranet working machine runs well etc., time-consumingly requires great effort again.
Summary of the invention
In order to address this problem, while gaining time, can easily Intranet be operated again, the present invention proposes a kind of method of remote inquiry based on third party's common interface, amendment virus characteristic.Described method performs in the intranet server being positioned at Intranet, and Intranet is connected with outer net by Network Isolation wall, comprises the following steps:
Step 1, by the information of third party's public correspondence interface from outer network termination, described outer network termination is arranged in outer net;
Step 2, monitor the information of reception in real time or termly;
Step 3, monitor the new information received after, sender's account of the information of transmission, reserved problem, command content are verified successively, verify if double unsuccessfully, then can automatically disconnect this response and report to the police, after complete verification passes through, carry out next step;
The instruction comprised in step 4, execution information;
Step 5, the execution result of instruction in step 4 is sent to outer network termination by described third party's public correspondence interface.
In addition, the invention allows for the system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic.Described system comprises the intranet server being positioned at Intranet and the outer network termination being positioned at outer net, and Intranet is connected with outer net by Network Isolation wall, and described intranet server comprises monitoring module, security module, the grand processing module of instruction and interactive module, wherein:
Interactive module passes through the information of third party's public correspondence interface from outer network termination,
Monitoring module monitors interactive module in real time or termly, monitors after interactive module collects fresh information and immediately information is passed to security module;
Security module is after receiving the information that monitoring module transmits, can verify successively sender's account of the information of transmission, reserved problem, command content, verify unsuccessfully if double, then can automatically disconnect this response and report to the police, after complete verification passes through, the instruction comprised in information be sent to the instruction macro interface of instruction macroblock;
Instruction macroblock is default functional interface API, is included in instruction in information realizes default function by execution, and for technical staff's inquiry, issue amendment, the execution result of instruction macroblock is sent to interactive module;
Interactive module receives execution result, and the execution result of instruction macroblock is sent to outer network termination by described third party's public correspondence interface.
One as above technical scheme is improved, and described third party's public correspondence interface comprises mail, instant messaging and short message communication interface.
One as above technical scheme is improved, and described outer net is Internet.
The present invention is based on third party's common communication interface, as mail interface, instant chat software interface, short message interface etc., propose and inquire about Intranet feature by the mode of remote interaction in outer net environment, and the method for the function revising virus characteristic can be realized, efficiently solve engineer not in Intranet environment, also conveniently can obtain the problem of the authority operating Intranet correlation function.
Accompanying drawing explanation
Below in conjunction with drawings and Examples, the present invention is further described, wherein:
Fig. 1 is flow chart of the present invention.
Embodiment
As shown in Figure 1, in a preferred embodiment, method proposed by the invention performs in the intranet server being positioned at Intranet, and here Intranet can be the local area network (LAN) of enterprises, and outer net is Internet, both isolate by network firewall.Certainly, intranet server has Internet connection authority.
Said method comprising the steps of:
Step 1, by the information of third party's public correspondence interface from outer network termination, described outer network termination is arranged in outer net, and third party's communication interface wherein comprises conventional communication protocol, such as mail, MSN, note etc.;
Step 2, monitor the information of reception in real time or termly;
Step 3, monitor the new information received after, sender's account of the information of transmission, reserved problem, command content are verified successively, verify if double unsuccessfully, then can automatically disconnect this response and report to the police, after complete verification passes through, carry out next step;
The instruction comprised in step 4, execution information;
Step 5, the execution result of instruction in step 4 is sent to outer network termination as feedback information by described third party's public correspondence interface.
Particularly, above method can be realized by a computer system, and described computer system comprises the intranet server be connected with outer net and the modules realizing above method formed.Be provided with Network Isolation wall between intranet server and outer network termination, Intranet here can be LAN or Intranet, and outer net can be Internet.This intranet server can not be replaced by common PC terminal, and in order to ensure stability and the high efficiency of operation, need to use server 7 × 24 to run, machine will be positioned at inner-mesh network environment and requirement can connect outer net Internet.
Described module comprises monitoring module, security module, the grand processing module of instruction and interactive module, is described in detail one by one below to these five parts:
1. interactive module
In the present invention, interactive module is first by the information of third party's public correspondence interface from outer network termination, it can be Mail Clients, instant communication software client, or short message server, be there is the ability of being received and sent messages by Internet or other approach, realize the communication with outer net client.
In the end, interactive module, by execution result grand for instruction, is sent to outer net by transmission interface API by the intranet server (namely by above-described third party's common communication interface) be connected with outer net, carries out real-time, interactive with engineer.Here the result returned can be returned by monitoring channel, as ' replied mail ', ' answer short message ', ' replying IM message '.
2. monitoring module
Operation monitoring module operates in intranet server terminal.In this preferred embodiment, this monitoring module may be embodied as the program run on computers, the monitoring program of a such as diversification, and it monitors interactive module in real time, collection information.Be employed herein but be not limited to ' mail Monitoring ', ' message monitoring ', ' instant messaging program monitoring '.Monitoring module can monitor the account of above-mentioned designated communication program, once monitor fresh information, immediately information is passed to security module.
3. security module
After receiving the message that monitoring module transmits, security module can to sending the account of message, reserved problem, command content verify successively.After sender's account is by checking, the more reserved problem of verification, finally the command content sent is verified.Verify if double unsuccessfully, then can automatically disconnect this response, and report to the police.Complete verification by after instruction can be sent to the grand processing module of instruction.
4. instruction macroblock
Instruction macroblock is default various functional interface API, and engineer, by very short instruction API, just can operate the various sophisticated functionss realizing presetting, to realize required remote inquiry, to issue the functions such as amendment.It performs the instruction comprised in the information, and the execution result of instruction is sent to interactive module.Execution result is fed back to user's (referring to the 1st explanation to interactive module) by interactive module again.
The present invention is based on third party's common communication interface, as mail interface, instant chat software interface, short message interface etc., propose and inquire about Intranet feature by the mode of remote interaction in outer net environment, and the method for the function revising virus characteristic can be realized, effectively solve engineer not in Intranet environment, also conveniently can obtain the problem of the authority operating Intranet correlation function.
Certainly, the present invention is except above-mentioned execution mode, and other equivalent technical solutions also should within its protection range.

Claims (4)

1., based on the remote inquiry of third party's common interface, a method for amendment virus characteristic, it performs in the intranet server being positioned at Intranet, and Intranet is connected with outer net by Network Isolation wall, it is characterized in that, comprises the following steps:
Step 1, by the information of third party's public correspondence interface from outer network termination, described outer network termination is arranged in outer net;
Step 2, monitor information by third party's public correspondence interface in real time or termly;
Step 3, monitor the new information received after, sender's account of the information of transmission, reserved problem, command content are verified successively, verify unsuccessfully if double, then can automatically disconnect to send information response and report to the police, carry out next step after complete verification passes through;
The instruction comprised in step 4, execution information is with inquiry, amendment virus characteristic;
Step 5, the execution result of instruction in step 4 is sent to outer network termination by described third party's public correspondence interface;
Wherein, the described third party's public correspondence interface in above-mentioned steps comprises mail, instant messaging and short message communication interface.
2. the method for the remote inquiry based on third party's common interface according to claim 1, amendment virus characteristic, is characterized in that: described outer net is Internet.
3. the system of the remote inquiry based on third party's common interface, amendment virus characteristic, comprise the intranet server being positioned at Intranet and the outer network termination being positioned at outer net, Intranet is connected with outer net by Network Isolation wall, it is characterized in that: described intranet server comprises monitoring module, security module, the grand processing module of instruction and interactive module, wherein:
Interactive module is by the information of third party's public correspondence interface from outer network termination;
Monitoring module monitors the information of interactive module by third party's public correspondence interface in real time or termly, monitors after interactive module collects fresh information and immediately information is passed to security module;
Security module is after receiving the information that monitoring module transmits, sender's account of the information of transmission, reserved problem, command content are verified successively, verify unsuccessfully if double, then can automatically disconnect to send information response and report to the police, after complete verification passes through, the instruction comprised in information is sent to the instruction macro interface of instruction macroblock;
Instruction macroblock is default functional interface API, and be included in instruction in information by execution and realize default function with inquiry, amendment virus characteristic, and supply technical staff's inquiry, issue amendment, the execution result of instruction macroblock is sent to interactive module;
Interactive module receives execution result, and the execution result of instruction macroblock is sent to outer network termination by described third party's public correspondence interface;
Described third party's public correspondence interface comprises mail, instant messaging and short message communication interface.
4. the system of the remote inquiry based on third party's common interface according to claim 3, amendment virus characteristic, is characterized in that: described outer net is Internet.
CN201210409474.2A 2012-10-24 2012-10-24 The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic Active CN102946383B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201210409474.2A CN102946383B (en) 2012-10-24 2012-10-24 The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201210409474.2A CN102946383B (en) 2012-10-24 2012-10-24 The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic

Publications (2)

Publication Number Publication Date
CN102946383A CN102946383A (en) 2013-02-27
CN102946383B true CN102946383B (en) 2015-11-18

Family

ID=47729290

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201210409474.2A Active CN102946383B (en) 2012-10-24 2012-10-24 The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic

Country Status (1)

Country Link
CN (1) CN102946383B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105892299B (en) * 2016-03-30 2019-05-03 本钢板材股份有限公司 Computer remote control system and method based on serial ports connection

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1809821A (en) * 2003-03-03 2006-07-26 微软公司 Feedback loop for spam prevention
CN102045309A (en) * 2009-10-14 2011-05-04 上海可鲁系统软件有限公司 Method and device for preventing computer from being attacked by virus

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4088082B2 (en) * 2002-02-15 2008-05-21 株式会社東芝 Apparatus and program for preventing infection by unknown computer virus
US7860971B2 (en) * 2008-02-21 2010-12-28 Microsoft Corporation Anti-spam tool for browser

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1809821A (en) * 2003-03-03 2006-07-26 微软公司 Feedback loop for spam prevention
CN102045309A (en) * 2009-10-14 2011-05-04 上海可鲁系统软件有限公司 Method and device for preventing computer from being attacked by virus

Also Published As

Publication number Publication date
CN102946383A (en) 2013-02-27

Similar Documents

Publication Publication Date Title
CN101146051B (en) An enterprise-level instant communication interconnection system and method for realizing enterprise interconnection
CN100493045C (en) Group message transmitting method, transmitting client and system
CN102594845B (en) Instant message transmission method based on XMPP
CN101309233B (en) Method realizing TCP connection reusing in instant communication
CN101018141B (en) Method and system for providing the instant communication for the electronic bulletin board
CN101193070B (en) Instant communication system, instant communication client and instant communication method
US20050160144A1 (en) System and method for filtering network messages
CN100566259C (en) A kind of method and system that make IM group and chatroom intercommunication chat message
US20150215291A1 (en) Secure decentralized content management platform and transparent gateway
CN101795222B (en) Multi-stage forward service system and method
WO2005002126A3 (en) Self-contained instant messaging appliance
CN106302371A (en) A kind of firewall control method based on subscriber service system and system
CN106027489B (en) The method, apparatus and system of internet connection
CN102957730B (en) Data transmission method and system
CN108632044A (en) A kind of information interaction system based on Self-certified code
CN102035655A (en) Implementation method for end-to-end instant messaging, and end-to-end instant messaging terminal and system
US20140089441A1 (en) Method And System Of Transferring Electronic Messages Using An Instant Messaging Protocol
CN101141396B (en) Packet processing method and network appliance
CN102946383B (en) The method and system of a kind of remote inquiry based on third party's common interface, amendment virus characteristic
CN100446510C (en) System and method for implementing business integrating between interprises
CN101378550A (en) System and method for status management base on instant communication platform
CN101247363A (en) Method, client terminal and system for implementing instant communication message reminding
CN100574205C (en) A kind of method of setting up instant communication network neighbor
CN101394373B (en) System and method for adding closed customer group in instant communication network customer terminal
CN102325096A (en) Method for realizing communication content life management, terminal thereof and system thereof

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20191126

Address after: Room 105-53811, No. 6 Baohua Road, Hengqin New District, Zhuhai City, Guangdong Province

Patentee after: Zhuhai Seal Interest Technology Co., Ltd.

Address before: 519000, No. 10, main building, No. 6, science Road, Harbour Road, Tang Wan Town, Guangdong, Zhuhai, 601F

Patentee before: Zhuhai Juntian Electronic Technology Co.,Ltd.

TR01 Transfer of patent right