CN108809938B - Remote control implementation method and system for password equipment - Google Patents
Remote control implementation method and system for password equipment Download PDFInfo
- Publication number
- CN108809938B CN108809938B CN201810366571.5A CN201810366571A CN108809938B CN 108809938 B CN108809938 B CN 108809938B CN 201810366571 A CN201810366571 A CN 201810366571A CN 108809938 B CN108809938 B CN 108809938B
- Authority
- CN
- China
- Prior art keywords
- administrator
- authentication medium
- password
- management
- administrator authentication
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0869—Network architectures or network communication protocols for network security for authentication of entities for achieving mutual authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Power Engineering (AREA)
- Telephonic Communication Services (AREA)
- Computer And Data Communications (AREA)
Abstract
The invention discloses a method and a system for realizing remote control of password equipment, wherein the method comprises the following steps: performing initialization operation on the password device through an administrator authentication medium; adopting a TLS bidirectional authentication method, and performing management and control operation on a remote terminal through an administrator authentication medium; the system comprises an initialization module and a remote operation module. After initialization operation is performed on the password equipment through the administrator authentication medium, management and control operation can be performed on the remote terminal through the administrator authentication medium, an operator does not need to insert the corresponding administrator authentication medium into the password equipment on site to perform daily management and control operation, and the password management and control system is suitable for environments such as private clouds and public clouds and is wide in application range; in addition, the invention adopts TLS bidirectional authentication to realize authentication between the password equipment and the remote terminal, ensures the safety of data transmission between the remote terminal and the password equipment, has high safety and can be widely applied to the technical field of safety equipment management.
Description
Technical Field
The invention relates to the technical field of safety equipment management, in particular to a method and a system for realizing remote control of password equipment.
Background
The noun explains:
TLS refers to a secure transport layer protocol for providing privacy and data integrity between two communicating applications, consisting of two layers: the TLS Record protocol (TLS Record) and the TLS Handshake protocol (TLS Handshake). The lower layer is the TLS recording protocol, which is located above a reliable transport protocol (e.g., TCP), and is independent of the specific application, so the TLS protocol is generally classified as a transport layer security protocol.
The external interface of the password device comprises a service network port, a management network port, an authentication Token (Token) interface, a serial port and the like. The authentication token interface is connected with an administrator authentication medium, such as an IC card, a USBKey and the like. The management process of the password equipment is divided into two major stages of equipment initialization and equipment maintenance management. The password device initialization process involves initialization work of device administrator authentication, device keys, maintenance administrator authentication, and the like. The maintenance manager is subdivided into a system manager, a security manager and an audit manager, and the system manager has the functions of setting IP (Internet protocol), ports, gateways, service access white lists, system date and time and the like of service network ports; the security administrator manages the user key and the digital certificate; and the auditing administrator is responsible for auditing the operation logs of each administrator.
During the process of administrator authentication initialization, an operator needs to go to the field to insert an administrator authentication medium into a Token interface of the password device to complete initialization work.
In addition, in the process of daily management of the password device, when a device administrator, a system administrator, a security administrator and an audit administrator perform login operation, the operator of the corresponding role needs to insert the corresponding administrator authentication medium into the password device on the spot to realize login.
The management mode of the existing password equipment ensures that a system administrator, a security administrator and an audit administrator must go to the site to execute the operation of inserting the administrator authentication medium, and cannot perform remote security operation. With the use of password equipment becoming more and more common, even starting to use under environments such as private cloud, public cloud, etc., password equipment needs to realize safe remote management function, not only satisfies the high-strength authentication to the administrator, but also can adapt to the need of remote maintenance.
Disclosure of Invention
To solve the above technical problems, the present invention aims to: the method and the system for realizing remote control of the password equipment are wide in application range and high in safety.
The first technical scheme adopted by the invention is as follows:
a remote management and control implementation method for password equipment comprises the following steps:
performing initialization operation on the password device through an administrator authentication medium;
and (4) adopting a TLS (transport layer security) bidirectional authentication method, and performing management and control operation on the remote terminal through an administrator authentication medium.
Further, the step of performing an initialization operation on the cryptographic device through the administrator authentication medium includes the steps of:
inserting an administrator authentication medium into the password device and logging in management terminal software;
inputting an access password of an administrator authentication medium according to the administrator type;
generating a number of an administrator authentication medium according to the input access password, and inputting the number of the administrator authentication medium into the administrator authentication medium;
generating a signature key pair and an authentication key pair through an administrator authentication medium;
and transmitting the signature key public key, the authentication key public key and the serial number of the administrator authentication medium to the password device through the administrator authentication medium.
Further, the step of performing management and control operation on the remote terminal through an administrator authentication medium by using the TLS bidirectional authentication method includes the following steps:
inserting an administrator authentication medium into a remote terminal and logging in management terminal software;
inputting an access password of an administrator authentication medium according to the administrator type;
the management terminal software and the password equipment establish a TLS security channel;
the password equipment performs access control authentication on the remote terminal;
the remote terminal transmits the serial number of the administrator authentication medium and the administrator certificate to the password device through the TLS secure channel;
the password equipment determines the type and the authority of an administrator according to the received serial number of the administrator authentication medium and the administrator certificate;
and executing the management and control operation in the corresponding administrator authority through the remote terminal.
Further, the step of performing an initialization operation on the cryptographic device through the administrator authentication medium further includes the steps of:
authenticating an identity of an administrator on the cryptographic device through the signing key pair;
and performing bidirectional authentication on the remote terminal and the password equipment through the authentication key.
Further, the TLS bidirectional authentication method, which is used for performing management and control operations on a remote terminal through an administrator authentication medium, further includes the following steps:
performing comprehensive access control on remote control operation based on a white list access control mechanism;
wherein the white list includes an IP address and hardware fingerprint information of the remote terminal.
Further, the method also comprises the step of setting the IP address in the white list according to the network condition.
Further, the administrator authentication medium includes an IC card and a USBKey.
The second technical scheme adopted by the invention is as follows:
a remote management and control system for cryptographic devices, comprising:
the initialization module is used for carrying out initialization operation on the password equipment through an administrator authentication medium;
and the remote operation module is used for performing management and control operation on the remote terminal through an administrator authentication medium by adopting a TLS bidirectional authentication method.
Further, the initialization module includes:
the first login unit is used for inserting the administrator authentication medium into the password equipment and logging in the management terminal software;
a second input unit for inputting an access password of the administrator authentication medium according to the administrator type;
the first generation unit is used for generating the serial number of the administrator authentication medium according to the input access password and inputting the serial number of the administrator authentication medium into the administrator authentication medium;
a second generation unit configured to generate a signature key pair and an authentication key pair by the administrator authentication medium;
and the first transmission unit is used for transmitting the signature key public key, the authentication key public key and the serial number of the administrator authentication medium to the password equipment through the administrator authentication medium.
The third technical scheme adopted by the invention is as follows:
a remote management and control system for cryptographic devices, comprising:
a memory for storing a program;
the processor is configured to load the program to execute the method for implementing remote management and control of the cryptographic device according to the first technical solution.
The invention has the beneficial effects that: after initialization operation is performed on the password equipment through the administrator authentication medium, management and control operation can be performed on the remote terminal through the administrator authentication medium, an operator does not need to insert the corresponding administrator authentication medium into the password equipment on site to perform daily management and control operation, and the password management and control system is suitable for environments such as private clouds and public clouds and is wide in application range; in addition, the invention adopts TLS bidirectional authentication to realize the authentication between the password equipment and the remote terminal, thereby ensuring the safety of data transmission between the remote terminal and the password equipment and ensuring high safety.
Drawings
Fig. 1 is a flowchart illustrating steps of a method for implementing remote management and control of a cryptographic device according to the present invention;
FIG. 2 is a flow chart of initialization steps for a cryptographic device;
FIG. 3 is a flowchart illustrating the steps of the remote terminal management operation;
FIG. 4 is a schematic diagram of device connections during administrator initialization;
FIG. 5 is a diagram illustrating device connections during administrator telnet.
Detailed Description
The invention will be further explained and explained with reference to the drawings and the embodiments in the description. The step numbers in the embodiments of the present invention are set for convenience of illustration only, the order between the steps is not limited at all, and the execution order of each step in the embodiments can be adaptively adjusted according to the understanding of those skilled in the art.
Referring to fig. 1, the method for implementing remote management and control of a cryptographic device of the present invention includes the following steps:
performing initialization operation on the password device through an administrator authentication medium;
and (4) adopting a TLS (transport layer security) bidirectional authentication method, and performing management and control operation on the remote terminal through an administrator authentication medium.
Further as a preferred embodiment, the step of performing an initialization operation on the password device through the administrator authentication medium includes the steps of:
inserting an administrator authentication medium into the password device and logging in management terminal software;
inputting an access password of an administrator authentication medium according to the administrator type;
generating a number of an administrator authentication medium according to the input access password, and inputting the number of the administrator authentication medium into the administrator authentication medium;
generating a signature key pair and an authentication key pair through an administrator authentication medium;
and transmitting the signature key public key, the authentication key public key and the serial number of the administrator authentication medium to the password device through the administrator authentication medium.
Further as a preferred embodiment, the step of performing management and control operation on the remote terminal through an administrator authentication medium by using the TLS bidirectional authentication method includes the following steps:
inserting an administrator authentication medium into a remote terminal and logging in management terminal software;
inputting an access password of an administrator authentication medium according to the administrator type;
the management terminal software and the password equipment establish a TLS security channel;
the password equipment performs access control authentication on the remote terminal;
the remote terminal transmits the serial number of the administrator authentication medium and the administrator certificate to the password device through the TLS secure channel;
the password equipment determines the type and the authority of an administrator according to the received serial number of the administrator authentication medium and the administrator certificate;
and executing the management and control operation in the corresponding administrator authority through the remote terminal.
Further, as a preferred embodiment, the step of performing the initialization operation on the password device through the administrator authentication medium further includes the steps of:
authenticating an identity of an administrator on the cryptographic device through the signing key pair;
and performing bidirectional authentication on the remote terminal and the password equipment through the authentication key.
Further as a preferred embodiment, the TLS bidirectional authentication method, which performs the management and control operation on the remote terminal through the administrator authentication medium, further includes the following steps:
performing comprehensive access control on remote control operation based on a white list access control mechanism;
wherein the white list includes an IP address and hardware fingerprint information of the remote terminal.
Further as a preferred embodiment, the method further comprises the step of setting the IP address in the white list according to the network condition.
Further as a preferred embodiment, the administrator authentication medium includes an IC card and a USBKey.
Corresponding to the method of fig. 1, the present invention provides a remote management and control system for a cryptographic device, including:
the initialization module is used for carrying out initialization operation on the password equipment through an administrator authentication medium;
and the remote operation module is used for performing management and control operation on the remote terminal through an administrator authentication medium by adopting a TLS bidirectional authentication method.
Further as a preferred embodiment, the initialization module includes:
the first login unit is used for inserting the administrator authentication medium into the password equipment and logging in the management terminal software;
a second input unit for inputting an access password of the administrator authentication medium according to the administrator type;
the first generation unit is used for generating the serial number of the administrator authentication medium according to the input access password and inputting the serial number of the administrator authentication medium into the administrator authentication medium;
a second generation unit configured to generate a signature key pair and an authentication key pair by the administrator authentication medium;
and the first transmission unit is used for transmitting the signature key public key, the authentication key public key and the serial number of the administrator authentication medium to the password equipment through the administrator authentication medium.
Corresponding to the method of fig. 1, the present invention provides a remote management and control system for a cryptographic device, including:
a memory for storing a program;
and the processor is used for loading the program so as to execute the remote control implementation method of the password equipment.
Referring to fig. 2 and 3, the initialization process of the cryptographic device and the remote terminal management and control operation process of the present invention are described in detail below by using an IC card and a usb key as administrator authentication media, and specifically include the following steps:
(1) and performing initialization operation on the password device through the administrator authentication medium. As shown in fig. 4, the operator inserts the administrator authentication medium into the password device, and inserts the administrator authentication medium into the IC card interface of the password device when the authentication medium is an IC card; and when the authentication medium is the USBKey, inserting the USBKey into a USB interface of the password equipment. Specifically, the initialization operation specifically includes the following steps:
s11, inserting the administrator authentication medium into the password device and logging in the management terminal software;
s12, inputting an access password of the administrator authentication medium according to the type of the administrator;
s13, generating the number of the administrator authentication medium according to the input access password, and inputting the number of the administrator authentication medium into the administrator authentication medium;
s14, generating a signature key pair and an authentication key pair through an administrator authentication medium;
and S15, transmitting the public key of the signature key, the public key of the authentication key and the number of the administrator authentication medium to the password device through the administrator authentication medium.
(2) And performing management and control operation on the remote terminal through an administrator authentication medium by adopting a TLS bidirectional authentication method. As shown in fig. 5, the administrator inserts an administrator authentication medium on the remote terminal device, and when the authentication medium is an IC card, inserts it into an IC card interface of the password device; and when the authentication medium is the USBKey, inserting the USBKey into a USB interface of the password equipment.
S21, inserting the administrator authentication medium into the remote terminal and logging in the management terminal software;
s22, inputting an access password of the administrator authentication medium according to the type of the administrator;
s23, establishing a TLS (security layer security) channel between the management terminal software and the password equipment;
s24, the password equipment carries out access control authentication on the remote terminal;
s25, the remote terminal transmits the serial number of the administrator authentication medium and the administrator certificate to the password equipment through the TLS secure channel;
s26, the password device determines the type and authority of the administrator according to the received serial number of the administrator authentication medium and the administrator certificate;
s27, executing management and control operation in corresponding administrator authority through the remote terminal, for example, a system administrator sets IP, port, gateway, service access white list, system date and time and the like of a service network port; the security administrator manages the user key and the digital certificate; and the auditing administrator is responsible for auditing the operation logs of each administrator.
In addition, in order to ensure the safety of remote access of the password equipment, the invention adopts an enhanced comprehensive access control mechanism, and the realization principle of the access control mechanism is specifically as follows:
firstly, storing a serial number (ID) of an authentication medium, a signature key public key, an authentication key public key and a remote terminal white list (such as information of IP addresses, hardware fingerprints and the like) by a password device, wherein the IP addresses in the white list have the problem of adapting to scenes and need to be flexibly set according to network conditions;
and secondly, when the administrator remotely accesses the remote terminal, the administrator identity is identified and verified through the number (ID) of the authentication medium, the signature key pair, the authentication key public key and the white list information.
In summary, the method and system for implementing remote management and control of cryptographic devices of the present invention have the following advantages:
1) the method and the system can be widely applied to a traditional deployment mode, and can also be applied to environments such as private cloud and public cloud, and the like.
2) Ensuring the safety encryption of transmission data through a TLS-based safety transmission protocol; and mutual authentication between the management terminal and the password equipment is realized by adopting TLS-based bidirectional authentication, and malicious attack behaviors such as forged login and the like are prevented.
3) And an enhanced comprehensive access control mechanism is adopted, a white list access control mechanism (such as an IP address, a hardware fingerprint and the like) according to a security policy is provided, and only registered and authorized management terminals can perform remote network access operation.
4) The password equipment supports various authentication media, such as an IC card and a USBKey, the IC card is an intelligent card with a built-in CPU, and the IC card can safely and independently complete key storage and password operation by using an IC card reader interface to read and write data; the USBKey is the combination of an intelligent card and a card reader, can complete the safe storage and the cryptographic operation of a secret key as an IC card, uses a USB interface to read and write data, and has both safety and usability.
In addition, the invention can be applied to other security devices which need high-intensity access control and authentication besides the devices which need high-intensity access control and authentication, such as password devices.
While the preferred embodiments of the present invention have been illustrated and described, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.
Claims (8)
1. A remote control implementation method for password equipment is characterized in that: the method comprises the following steps:
performing initialization operation on the password device through an administrator authentication medium;
adopting a TLS bidirectional authentication method, and performing management and control operation on a remote terminal through an administrator authentication medium;
wherein the step of performing an initialization operation on the cryptographic device through the administrator authentication medium comprises the steps of:
inserting an administrator authentication medium into the password device and logging in management terminal software;
inputting an access password of an administrator authentication medium according to the administrator type;
generating a number of an administrator authentication medium according to the input access password, and inputting the number of the administrator authentication medium into the administrator authentication medium;
generating a signature key pair and an authentication key pair through an administrator authentication medium;
and transmitting the signature key public key, the authentication key public key and the serial number of the administrator authentication medium to the password device through the administrator authentication medium.
2. The method for implementing remote management and control of a cryptographic device according to claim 1, wherein: the TLS bidirectional authentication method is used for performing management and control operation on a remote terminal through an administrator authentication medium, and comprises the following steps:
inserting an administrator authentication medium into a remote terminal and logging in management terminal software;
inputting an access password of an administrator authentication medium according to the administrator type;
the management terminal software and the password equipment establish a TLS security channel;
the password equipment performs access control authentication on the remote terminal;
the remote terminal transmits the serial number of the administrator authentication medium and the administrator certificate to the password device through the TLS secure channel;
the password equipment determines the type and the authority of an administrator according to the received serial number of the administrator authentication medium and the administrator certificate;
and executing the management and control operation in the corresponding administrator authority through the remote terminal.
3. The method for implementing remote management and control of a cryptographic device according to claim 1, wherein: the step of performing an initialization operation on the cryptographic device through the administrator authentication medium further comprises the steps of:
authenticating an identity of an administrator on the cryptographic device through the signing key pair;
and performing bidirectional authentication on the remote terminal and the password equipment through the authentication key.
4. The method for implementing remote management and control of a cryptographic device according to claim 2, wherein: the TLS bidirectional authentication method is used for performing management and control operation on a remote terminal through an administrator authentication medium, and further comprises the following steps:
performing comprehensive access control on remote control operation based on a white list access control mechanism;
wherein the white list includes an IP address and hardware fingerprint information of the remote terminal.
5. The method for implementing remote management and control of a cryptographic device according to claim 4, wherein: the method also comprises the step of setting the IP address in the white list according to the network condition.
6. The method for implementing remote management and control of a cryptographic device according to claim 1, wherein: the administrator authentication medium includes an IC card and a usb key.
7. The utility model provides a remote management and control system of password equipment which characterized in that: the method comprises the following steps:
the initialization module is used for carrying out initialization operation on the password equipment through an administrator authentication medium;
the remote operation module is used for performing management and control operation on a remote terminal through an administrator authentication medium by adopting a TLS (transport layer security) bidirectional authentication method;
the first login unit is used for inserting the administrator authentication medium into the password equipment and logging in the management terminal software;
a second input unit for inputting an access password of the administrator authentication medium according to the administrator type;
the first generation unit is used for generating the serial number of the administrator authentication medium according to the input access password and inputting the serial number of the administrator authentication medium into the administrator authentication medium;
a second generation unit configured to generate a signature key pair and an authentication key pair by the administrator authentication medium;
and the first transmission unit is used for transmitting the signature key public key, the authentication key public key and the serial number of the administrator authentication medium to the password equipment through the administrator authentication medium.
8. The utility model provides a remote management and control system of password equipment which characterized in that: the method comprises the following steps:
a memory for storing a program;
a processor for loading the program to perform a method of implementing remote management of a cryptographic device as claimed in any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810366571.5A CN108809938B (en) | 2018-04-23 | 2018-04-23 | Remote control implementation method and system for password equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810366571.5A CN108809938B (en) | 2018-04-23 | 2018-04-23 | Remote control implementation method and system for password equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108809938A CN108809938A (en) | 2018-11-13 |
| CN108809938B true CN108809938B (en) | 2021-03-30 |
Family
ID=64093758
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810366571.5A Active CN108809938B (en) | 2018-04-23 | 2018-04-23 | Remote control implementation method and system for password equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108809938B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110958226A (en) * | 2019-11-14 | 2020-04-03 | 广州江南科友科技股份有限公司 | Password equipment access control method based on TLS |
| CN114244900B (en) * | 2021-12-14 | 2023-10-20 | 乾讯信息技术(无锡)有限公司 | VPN cipher machine remote safety management method based on unstable channel connection |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103580855A (en) * | 2013-11-07 | 2014-02-12 | 江南大学 | Usbkey management plan based on sharing technology |
| CN104881595A (en) * | 2015-04-27 | 2015-09-02 | 广东省电子商务认证有限公司 | Self-service remote unlocking method based on PIN (personnel identification number) code management |
| CN105141415A (en) * | 2015-09-15 | 2015-12-09 | 北京三未信安科技发展有限公司 | Remote management method and system of password equipment |
| CN105871866A (en) * | 2016-04-28 | 2016-08-17 | 济南大学 | System and method for password management based on computer hardware information |
| CN107197025A (en) * | 2017-06-09 | 2017-09-22 | 武汉果核科技有限公司 | A kind of intelligent POS long-distance management system and method |
| CN107800538A (en) * | 2016-09-01 | 2018-03-13 | 中电长城(长沙)信息技术有限公司 | A kind of self-service device remote cipher key distribution method |
-
2018
- 2018-04-23 CN CN201810366571.5A patent/CN108809938B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103580855A (en) * | 2013-11-07 | 2014-02-12 | 江南大学 | Usbkey management plan based on sharing technology |
| CN104881595A (en) * | 2015-04-27 | 2015-09-02 | 广东省电子商务认证有限公司 | Self-service remote unlocking method based on PIN (personnel identification number) code management |
| CN105141415A (en) * | 2015-09-15 | 2015-12-09 | 北京三未信安科技发展有限公司 | Remote management method and system of password equipment |
| CN105871866A (en) * | 2016-04-28 | 2016-08-17 | 济南大学 | System and method for password management based on computer hardware information |
| CN107800538A (en) * | 2016-09-01 | 2018-03-13 | 中电长城(长沙)信息技术有限公司 | A kind of self-service device remote cipher key distribution method |
| CN107197025A (en) * | 2017-06-09 | 2017-09-22 | 武汉果核科技有限公司 | A kind of intelligent POS long-distance management system and method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108809938A (en) | 2018-11-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP2021938B1 (en) | Policy driven, credential delegation for single sign on and secure access to network resources | |
| US8438631B1 (en) | Security enclave device to extend a virtual secure processing environment to a client device | |
| US8838965B2 (en) | Secure remote support automation process | |
| CN101459513B (en) | Computer and transmitting method of security information for authentication | |
| US8266683B2 (en) | Automated security privilege setting for remote system users | |
| US7861015B2 (en) | USB apparatus and control method therein | |
| CN101122942B (en) | Data safe reading method and its safe storage device | |
| CN100533459C (en) | Data safety reading method and safety storage apparatus thereof | |
| JP2015528149A (en) | Start of corporate trigger type 2CHK association | |
| CN103780609A (en) | Cloud data processing method and device and cloud data security gateway | |
| JP2003526836A (en) | Method, system, server, and apparatus for securing a communication network | |
| JP3899365B1 (en) | Information storage device | |
| CN103986717A (en) | Network data secure transmission and storage system and method | |
| WO2014105914A1 (en) | Security enclave device to extend a virtual secure processing environment to a client device | |
| JP2001148697A (en) | Method for communicating information via channel having low reliability | |
| EP2902934B1 (en) | Portable Security Device, Method for Securing a Data Exchange and Computer Program Product | |
| CN108809938B (en) | Remote control implementation method and system for password equipment | |
| KR101858207B1 (en) | System for security network | |
| CN103269301A (en) | Desktop type IPSecVPN cryptographic machine and networking method | |
| US20080060060A1 (en) | Automated Security privilege setting for remote system users | |
| KR100504330B1 (en) | USB token that recognize automatically in window operating system and method thereof | |
| CN111079109A (en) | Local security authorization login method and system compatible with multiple browsers | |
| WO2019224106A1 (en) | Method and system for implementing a virtual smart card service | |
| CN202495948U (en) | Network security terminal | |
| CN115001936B (en) | Operation and maintenance management system and method based on management agent and computer equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |