CN103188255A - Application proxy and security module separated network security protection method - Google Patents

Abstract

The invention provides an application proxy and security module separated network security protection method for simultaneously protecting information security among a plurality of applications. The application proxy and security module separated network security protection method comprises the following steps that: (1) because a client side firstly passes through a proxy module when having access to background services, data sent by the client side is decomposed by the proxy module, and effective information in the data is analyzed and delivered into a security module; (2) the information is returned to the proxy module after whether the delivered information is secure is judged by the security module; and (3) whether the information is agented to a server is determined by the proxy module according to a return value of the security module. The network security protection method provided by the invention has the advantages that the application security problem of a plurality of different applications can be solved simultaneously; and a security and application separation mode is adopted, so that the application security and the system security are protected.

Description

The network safety protective method that a kind of application proxy separates with security module

Technical field

The present invention relates to a kind of network safety protective method, the network safety protective method that especially a kind of application proxy separates with security module.

Background technology

The security mechanism of existing application level is mainly divided two kinds: 1, oneself developing in the application system has security mechanism: using in this is the part of security mechanism as application, is compiled in the application program the inside.2, use the API of the security module interface of third party's exploitation.As can be seen, these two kinds of method for security protection all are when the client-access server in Fig. 1, if the application safety module is arranged, server returns to the server process request after can passing to the application safety module to data earlier; If not then directly give server process.

This process is easy to find out that client directly links to each other with server.Application safety and application are an integral body.Add if desired and use, need develop different programs to different application, also must make amendment to application simultaneously.And the security module of both methods all is tied to closely with using, if leak has appearred in security module, so whole applying portion must be revised, and all can bring very big trouble for total system.Disobey and return operation directly to be applied on the application server, protection is attacked other firewall box must be installed again if desired.Simultaneously, the security module of many application and application module make whole system maintenance very complicated in a cover program.

Summary of the invention

The invention provides the network safety protective method that a kind of application proxy of protecting the information security between a plurality of application simultaneously separates with security module.

The network safety protective method that the application proxy of realization the object of the invention separates with security module comprises the steps:

When (1) the client-access backstage was served, earlier through proxy module, proxy module decomposed the data that client sends, and analyzed wherein effective information, imported security module into;

(2) after security module judges whether safety according to the information of importing into, return proxy module;

(3) again by proxy module according to the security module return value, determine whether to act on behalf of server.

The beneficial effect of the network safety protective method that a kind of application proxy of the present invention separates with security module is as follows:

1, network safety protective method of the present invention can solve simultaneously the application safety problem of a plurality of different application.

2, safety and application clastotype, protection application safety and system safety.

Description of drawings

Fig. 1 is the schematic diagram of existing network safety protective method.

The schematic diagram of the network safety protective method that Fig. 2 separates with security module for application proxy of the present invention.

Embodiment

As shown in Figure 2, the network safety protective method that application proxy of the present invention separates with security module comprises the steps:

When (1) the client-access backstage was served, earlier through proxy module, proxy module decomposed the data that client sends, and analyzed wherein effective information, imported security module into;

(2) after security module judges whether safety according to the information of importing into, return proxy module;

(3) again by proxy module according to the security module return value, determine whether to act on behalf of server.

The advantage of the network safety protective method that application proxy of the present invention separates with security module is as follows:

1, application separates fully with security module.

2, the agency separates fully with security module.

3, need not be based on using the redevelopment security module, the user can use this invention directly to add security module for using.

4, safety means solve the safety problem that many too platforms are used.

5, replace firewall functionality.

Embodiment recited above is described preferred implementation of the present invention; be not that scope of the present invention is limited; design under the spiritual prerequisite not breaking away from the present invention; various distortion and improvement that the common engineers and technicians in this area make technical solution of the present invention all should fall in the definite protection range of claims of the present invention.

Claims (1)

1. the network safety protective method that application proxy separates with security module comprises the steps:

When (1) the client-access backstage was served, earlier through proxy module, proxy module decomposed the data that client sends, and analyzed wherein effective information, imported security module into;

(2) after security module judges whether safety according to the information of importing into, return proxy module;

(3) again by proxy module according to the security module return value, determine whether to act on behalf of server.

Images