CN116545875A - Safety communication control system based on Internet of things - Google Patents

Safety communication control system based on Internet of things Download PDF

Info

Publication number
CN116545875A
CN116545875A CN202310401934.5A CN202310401934A CN116545875A CN 116545875 A CN116545875 A CN 116545875A CN 202310401934 A CN202310401934 A CN 202310401934A CN 116545875 A CN116545875 A CN 116545875A
Authority
CN
China
Prior art keywords
virtual private
private cloud
management
gateway
module
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202310401934.5A
Other languages
Chinese (zh)
Inventor
刘霞
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shanghai Misri Communication Technology Co ltd
Original Assignee
Shanghai Misri Communication Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shanghai Misri Communication Technology Co ltd filed Critical Shanghai Misri Communication Technology Co ltd
Priority to CN202310401934.5A priority Critical patent/CN116545875A/en
Publication of CN116545875A publication Critical patent/CN116545875A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/40Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using virtualisation of network functions or resources, e.g. SDN or NFV entities
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/28Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/12Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02PCLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
    • Y02P90/00Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
    • Y02P90/02Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Abstract

The invention discloses a safety communication control system based on the Internet of things, which comprises the following operation methods: performing management control of a gateway and bypass networking of the virtual private cloud system; performing data storage management of the virtual private cloud through a database table; performing security management analysis on the virtual private cloud system; and (5) performing data encryption and log summarization control processing. The management control of the gateway and the bypass networking of the virtual private cloud system comprises the following steps: performing gateway operation optimization management on the virtual private cloud system to realize management control of a controlled device and anomaly monitoring of the virtual private cloud; and after the optimization management of the gateway is completed, forwarding the data of the target service of the virtual private cloud system through bypass networking. The data storage management of the virtual private cloud through the database table comprises the following steps: the design database table provides classified storage management services for data of the virtual private cloud. The invention has the characteristics of intelligent control processing and strong practicability.

Description

Safety communication control system based on Internet of things
Technical Field
The invention relates to the technical field of secure communication, in particular to a secure communication control system based on the Internet of things.
Background
Virtual Private Cloud (VPC) is a collection of computing, storage, and network resources across multiple sites on a wide area network, a private cloud established based on public clouds that is managed by users themselves. A user can directly rent a cloud host from a public cloud service provider, maintain a self service management system by using public network IP and network resources provided by the public cloud service provider, and also can establish a virtual private cloud platform which completely belongs to the user in a machine room through an open source cloud platform. A user may configure and maintain internal network resources through the virtual private cloud. However, as the number of users is greatly increased, corresponding protection of cloud hosts and network resources is loopholes, and virtual private cloud is easy to attack, so that the privacy security of the users is greatly threatened, and the use satisfaction of the users is seriously affected. Therefore, it is necessary to design a secure communication control system based on the internet of things with strong intelligent control processing and practicability.
Disclosure of Invention
The invention aims to provide a secure communication control system based on the Internet of things, so as to solve the problems in the background technology.
In order to solve the technical problems, the invention provides the following technical scheme: the safe communication control method based on the Internet of things comprises the following steps:
performing management control of a gateway and bypass networking of the virtual private cloud system;
performing data storage management of the virtual private cloud through a database table;
performing security management analysis on the virtual private cloud system;
and (5) performing data encryption and log summarization control processing.
According to the above technical solution, the management control for performing gateway and bypass networking of the vpn system includes:
performing gateway operation optimization management on the virtual private cloud system to realize management control of a controlled device and anomaly monitoring of the virtual private cloud;
and after the optimization management of the gateway is completed, forwarding the data of the target service of the virtual private cloud system through bypass networking.
According to the above technical solution, the data storage management of the virtual private cloud through the database table includes:
the design database table provides classified storage management services for data of the virtual private cloud.
According to the above technical solution, the performing security management analysis on the virtual private cloud system includes:
judging the type of the data packet according to the protocol header, and performing session management analysis of the virtual private cloud system;
performing session key control management between the server and the client through key negotiation;
after the key agreement process is completed, the gateway sends the encrypted authentication data packet to the controller for gateway identity authentication processing.
According to the above technical scheme, the data encryption and log summary control processing includes:
after receiving a data request data packet sent by a controller, the controller encrypts a query result plaintext and sends the ciphertext to the controller;
and summarizing, classifying and storing the operation and running processes of the virtual private cloud through the system log, and providing a reliable reference basis for further optimization and improvement.
According to the above technical scheme, a secure communication control system based on the internet of things includes:
the primary processing module is used for performing primary processing on the virtual private cloud system;
the analysis management module is used for carrying out security management analysis on the virtual private cloud system;
and the encryption summarizing module is used for carrying out data encryption and log summarizing control processing.
According to the above technical scheme, the preliminary processing module includes:
the gateway management module is used for carrying out gateway management of the virtual private cloud system;
the bypass networking module is used for performing management control of bypass networking;
and the database table module is used for managing and storing the database tables.
According to the above technical solution, the analysis management module includes:
the session management module is used for carrying out session management analysis of the virtual private cloud system;
the key negotiation module is used for controlling and managing session keys between the server and the client;
and the analysis authentication module is used for carrying out gateway identity authentication processing.
According to the above technical scheme, the encryption summary module includes:
the data encryption module is used for carrying out data encryption processing;
and the log summarizing module is used for carrying out log summarizing control storage.
Compared with the prior art, the invention has the following beneficial effects: according to the invention, the primary processing module, the analysis management module and the encryption summarizing module are arranged, so that the gateway operation of the virtual private cloud system is more efficient and stable, the working efficiency of the virtual private cloud is improved, the safe processing is facilitated, the storage of the virtual private cloud data is clearer and more standard, the data retrieval and transmission are more efficient and more accurate, and the session safety between the server and the client is effectively improved.
Drawings
The accompanying drawings are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate the invention and together with the embodiments of the invention, serve to explain the invention. In the drawings:
fig. 1 is a flowchart of a secure communication control method based on internet of things according to an embodiment of the present invention;
fig. 2 is a block diagram of a secure communication control system based on internet of things according to a second embodiment of the present invention.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
Embodiment one: fig. 1 is a flowchart of a secure communication control method based on the internet of things according to an embodiment of the present invention, where the method may be implemented by the secure communication control system based on the internet of things according to the embodiment of the present invention, and the system is composed of a plurality of software and hardware modules, as shown in fig. 1, and the method specifically includes the following steps:
s101, performing management control of a gateway and bypass networking of a virtual private cloud system;
in the embodiment of the invention, the gateway operation optimization management is carried out on the virtual private cloud system, so that the management control of the controlled device and the abnormality monitoring of the virtual private cloud is realized; in the step, the control gateway receives the command sent by the controller and executes corresponding operation to monitor other service states on the gateway, meanwhile, other programs are guaranteed to be normally started through abnormal monitoring, after the conditions of process exit, network abnormality and the like occur, the starting process is controlled and the network configuration is restored, the normal operation of the system is guaranteed, meanwhile, the gateway controller is further started to be responsible for carrying out safety communication with the controller, VPN configuration information and network configuration information are firstly obtained from the controller, corresponding configuration files are generated, then data of the networking gateway are forwarded to other networking gateways through a data tunnel of networking service, through the processing, the gateway operation of the virtual private cloud system can be more efficient and stable, the working efficiency of the virtual private cloud is improved, and the follow-up safety processing is facilitated.
After the optimization management of the gateway is completed, forwarding data of target services of the virtual private cloud system through bypass networking; according to the method, firstly, according to the condition that a public network IP and port mapping are provided by a user, a secure access gateway is deployed on a private cloud core switch which is required to be accessed by a bypass by the user, a VPN server is deployed on the secure gateway and used as a data server for accessing the private cloud network, a VPN client is deployed on a gateway of the user bypass network, an intranet NAT rule of the gateway is configured, data accessing the bypass is led into a VPN data channel for forwarding, then for the condition that the public network IP is not provided by the user, the VPN server is deployed on the public cloud and used as a data forwarding server, meanwhile, a GRE tunnel is configured on the VPN data channel of the gateway for IP penetration, static routing is further configured, intranet data is forwarded to the GRE tunnel, bypass access is realized, and the data transmission flexibility of the virtual private cloud is improved.
S102, carrying out data storage management of the virtual private cloud through a database table;
illustratively, in an embodiment of the present invention, the design database table provides a classified storage management service for data of the virtual private cloud; in the step, a gateway information table, a project table, a link table, a public routing table and a private routing table are respectively established through a database table and used for classifying, storing and managing the data of the virtual private cloud, specifically, the gateway information table comprises: the method comprises the steps of storing gateway MAC addresses, WAN network segment information, LAN network segment information, expiration time, link configuration, virtual IP, access control rules, private routes and the like, wherein a project table is a collection of gateways and is used for managing the gateways in the same group of networks, a field comprises project names, project descriptions, creation time and the like, a link table is a collection of a plurality of resources, one link comprises a plurality of resources, when the gateway binds the link, the resources can be switched to other resources when the resources are unavailable, the stability of the service is ensured, a public routing table stores routing information which needs to be loaded by all the gateways under the project, and a private routing table stores routing information which needs to be loaded by a single gateway.
S103, carrying out security management analysis on the virtual private cloud system;
in the embodiment of the invention, the type of the data packet is judged according to the protocol header, and session management analysis of the virtual private cloud system is carried out; because the communication protocol header mainly comprises four types of data packets, ox01 represents a key negotiation stage, ox02 represents a gateway authentication data packet, 0x03 represents a transmitted user data packet and Ox04 represents a heartbeat packet, in this step, session management determines the role of the data packets according to the identification of the protocol header, and processes the data packets of different protocol headers differently according to a set rule, wherein a timeout session deletion mechanism is set for a session with abnormal network communication, so as to prevent the situation that network ports are occupied or the session is full and service cannot be provided, the judgment basis of session timeout is the number of times of successful heartbeat packet reception, if the server does not receive the heartbeat packet sent by the client beyond the set number of times, the server judges that the session is overtime, deletes the connection from a session list, and releases related resources, thereby indirectly improving the operation safety and smoothness of the virtual private cloud system.
Performing session key control management between the server and the client through key negotiation; in the step, after receiving a key negotiation data packet and analyzing the key negotiation data packet, a controller generates a session ID and stores the session ID, and further calculates a new nonce value according to the session ID and the received client nonce value, then invokes a public-private key generation algorithm to generate a public key and a private key, signs a protocol header, the nonce value, the session ID and the public key by using the private key, sends the signature to a controlled terminal after the signature is completed, and after receiving the signature, the controlled terminal performs signature verification according to the obtained public key and other information, and after the verification passes, the controller completes a key negotiation process, and through the process, the session safety between the server and the client can be effectively improved.
After the key agreement process is completed, the gateway sends the encrypted authentication data packet to the controller to carry out gateway identity authentication processing; in the step, after receiving the encrypted authentication data packet, the controller firstly inquires whether the gateway information exists in a local database, judges whether the gateway is out of date or not and is disabled or not, if the gateway is not out of date or not, the authentication packet constructed according to the user name and the password is sent to an authentication server for authentication, the authentication result is returned to the gateway after being encrypted, if the gateway does not exist in the database or the gateway is expired, the gateway directly returns an authentication failure data packet to the gateway, and the gateway terminates the process of establishing a security channel; the security of the virtual private cloud system can be greatly improved through the processing, and the security of the user privacy is effectively protected.
S104, performing data encryption and log summarization control processing;
illustratively, in the embodiment of the present invention, after receiving a data request packet sent by a slave, a controller encrypts a plaintext of a query result and sends the ciphertext to the slave; the encryption parameters are parameters generated in a key negotiation stage, and the data transmission security of the virtual private cloud system can be effectively improved through the processing.
And summarizing, classifying and storing the operation and running processes of the virtual private cloud through the system log, and providing a reliable reference basis for further optimization and improvement.
Embodiment two: the second embodiment of the present invention provides a secure communication control system based on the internet of things, and fig. 2 is a schematic diagram of module configuration of the secure communication control system based on the internet of things provided in the second embodiment, as shown in fig. 2, where the system includes:
the primary processing module is used for performing primary processing on the virtual private cloud system;
the analysis management module is used for carrying out security management analysis on the virtual private cloud system;
and the encryption summarizing module is used for carrying out data encryption and log summarizing control processing.
In some embodiments of the invention, the preliminary processing module comprises:
the gateway management module is used for carrying out gateway management of the virtual private cloud system;
the bypass networking module is used for performing management control of bypass networking;
and the database table module is used for managing and storing the database tables.
In some embodiments of the invention, the analysis management module comprises:
the session management module is used for carrying out session management analysis of the virtual private cloud system;
the key negotiation module is used for controlling and managing session keys between the server and the client;
and the analysis authentication module is used for carrying out gateway identity authentication processing.
In some embodiments of the invention, the cryptographic summary module comprises:
the data encryption module is used for carrying out data encryption processing;
and the log summarizing module is used for carrying out log summarizing control storage.
It is noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus.
Finally, it should be noted that: the foregoing description is only a preferred embodiment of the present invention, and the present invention is not limited thereto, but it is to be understood that modifications and equivalents of some of the technical features described in the foregoing embodiments may be made by those skilled in the art, although the present invention has been described in detail with reference to the foregoing embodiments. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims (9)

1. The safe communication control method based on the Internet of things is characterized by comprising the following steps of: comprising the following steps:
performing management control of a gateway and bypass networking of the virtual private cloud system;
performing data storage management of the virtual private cloud through a database table;
performing security management analysis on the virtual private cloud system;
and (5) performing data encryption and log summarization control processing.
2. The secure communication control method based on the internet of things according to claim 1, wherein: the management control of the gateway and the bypass networking of the virtual private cloud system comprises the following steps:
performing gateway operation optimization management on the virtual private cloud system to realize management control of a controlled device and anomaly monitoring of the virtual private cloud;
and after the optimization management of the gateway is completed, forwarding the data of the target service of the virtual private cloud system through bypass networking.
3. The secure communication control method based on the internet of things according to claim 1, wherein: the data storage management of the virtual private cloud through the database table comprises the following steps:
the design database table provides classified storage management services for data of the virtual private cloud.
4. The secure communication control method based on the internet of things according to claim 1, wherein: the security management analysis of the virtual private cloud system comprises the following steps:
judging the type of the data packet according to the protocol header, and performing session management analysis of the virtual private cloud system;
performing session key control management between the server and the client through key negotiation;
after the key agreement process is completed, the gateway sends the encrypted authentication data packet to the controller for gateway identity authentication processing.
5. The secure communication control method based on the internet of things according to claim 1, wherein: the data encryption and log summarization control processing comprises the following steps:
after receiving a data request data packet sent by a controller, the controller encrypts a query result plaintext and sends the ciphertext to the controller;
and summarizing, classifying and storing the operation and running processes of the virtual private cloud through the system log, and providing a reliable reference basis for further optimization and improvement.
6. The utility model provides a safe communication control system based on thing networking which characterized in that: comprising the following steps:
the primary processing module is used for performing primary processing on the virtual private cloud system;
the analysis management module is used for carrying out security management analysis on the virtual private cloud system;
and the encryption summarizing module is used for carrying out data encryption and log summarizing control processing.
7. The internet of things-based secure communication control system of claim 6, wherein: the preliminary processing module includes:
the gateway management module is used for carrying out gateway management of the virtual private cloud system;
the bypass networking module is used for performing management control of bypass networking;
and the database table module is used for managing and storing the database tables.
8. The internet of things-based secure communication control system of claim 6, wherein: the analysis management module comprises:
the session management module is used for carrying out session management analysis of the virtual private cloud system;
the key negotiation module is used for controlling and managing session keys between the server and the client;
and the analysis authentication module is used for carrying out gateway identity authentication processing.
9. The internet of things-based secure communication control system of claim 6, wherein: the encryption summarization module comprises:
the data encryption module is used for carrying out data encryption processing;
and the log summarizing module is used for carrying out log summarizing control storage.
CN202310401934.5A 2023-04-17 2023-04-17 Safety communication control system based on Internet of things Pending CN116545875A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310401934.5A CN116545875A (en) 2023-04-17 2023-04-17 Safety communication control system based on Internet of things

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310401934.5A CN116545875A (en) 2023-04-17 2023-04-17 Safety communication control system based on Internet of things

Publications (1)

Publication Number Publication Date
CN116545875A true CN116545875A (en) 2023-08-04

Family

ID=87455246

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310401934.5A Pending CN116545875A (en) 2023-04-17 2023-04-17 Safety communication control system based on Internet of things

Country Status (1)

Country Link
CN (1) CN116545875A (en)

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105450636A (en) * 2015-11-06 2016-03-30 长春智信创联科技有限公司 Cloud computing management system and management method of cloud computing management system
US20180007002A1 (en) * 2016-06-30 2018-01-04 Sophos Limited Elastic outbound gateway
CN109561171A (en) * 2019-01-22 2019-04-02 北京百度网讯科技有限公司 The configuration method and device of virtual private cloud service
US20190171966A1 (en) * 2017-12-01 2019-06-06 Govindarajan Rangasamy Automated application reliability management using adaptable machine learning models
CN112866077A (en) * 2021-02-26 2021-05-28 哈尔滨工业大学(威海) Large-scale automatic networking method, management system, equipment and storage medium for modality fusion
US20220239681A1 (en) * 2021-01-28 2022-07-28 BlocWatch Inc. Methods for public cloud database activity monitoring and devices thereof
WO2022177829A1 (en) * 2021-02-17 2022-08-25 Aviatrix Systems, Inc. System and method for restricting communications between virtual private cloud networks through security domains
WO2022177830A1 (en) * 2021-02-17 2022-08-25 Aviatrix Systems, Inc. Cloud-based egress filtering system
CN115913617A (en) * 2022-09-26 2023-04-04 阿里巴巴(中国)有限公司 Cloud networking system, secure access method, device and storage medium

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105450636A (en) * 2015-11-06 2016-03-30 长春智信创联科技有限公司 Cloud computing management system and management method of cloud computing management system
US20180007002A1 (en) * 2016-06-30 2018-01-04 Sophos Limited Elastic outbound gateway
US20190171966A1 (en) * 2017-12-01 2019-06-06 Govindarajan Rangasamy Automated application reliability management using adaptable machine learning models
CN109561171A (en) * 2019-01-22 2019-04-02 北京百度网讯科技有限公司 The configuration method and device of virtual private cloud service
US20220239681A1 (en) * 2021-01-28 2022-07-28 BlocWatch Inc. Methods for public cloud database activity monitoring and devices thereof
WO2022177829A1 (en) * 2021-02-17 2022-08-25 Aviatrix Systems, Inc. System and method for restricting communications between virtual private cloud networks through security domains
WO2022177830A1 (en) * 2021-02-17 2022-08-25 Aviatrix Systems, Inc. Cloud-based egress filtering system
CN112866077A (en) * 2021-02-26 2021-05-28 哈尔滨工业大学(威海) Large-scale automatic networking method, management system, equipment and storage medium for modality fusion
CN115913617A (en) * 2022-09-26 2023-04-04 阿里巴巴(中国)有限公司 Cloud networking system, secure access method, device and storage medium

Similar Documents

Publication Publication Date Title
US8146160B2 (en) Method and system for authentication event security policy generation
US5822434A (en) Scheme to allow two computers on a network to upgrade from a non-secured to a secured session
US9021090B2 (en) Network access firewall
US7826393B2 (en) Management computer and computer system for setting port configuration information
US7823194B2 (en) System and methods for identification and tracking of user and/or source initiating communication in a computer network
US8762726B2 (en) System and method for secure access
US8041812B2 (en) System and method for supplicant based accounting and access
US7774602B2 (en) Secure modem gateway concentrator
US20080115203A1 (en) Method and system for traffic engineering in secured networks
CN111447180B (en) Security access control strategy for power Internet of things edge access management system
CN110855707A (en) Internet of things communication pipeline safety control system and method
WO2019237683A1 (en) Protocol packet, and method for managing virtual client terminal device
JP2004242222A (en) Method and apparatus of network control
US7424736B2 (en) Method for establishing directed circuits between parties with limited mutual trust
CN116545875A (en) Safety communication control system based on Internet of things
CN111131172B (en) Method for actively calling service by intranet
CN116074125B (en) End-to-end password middle station zero trust security gateway system
CN113709157B (en) Electric power safety research and development network structure based on cloud routing and safety control center
CN109150661A (en) A kind of method for discovering equipment and device
CN114640512B (en) Security service system, access control method, and computer-readable storage medium
US11683167B2 (en) Network traffic management using server name indication
CN117596021A (en) Substation monitoring system remote development and debugging method based on intranet penetration
Apostolopoulos et al. SNMP-based network security management using a temporal database approach
CN117857120A (en) Method and device for realizing network traffic safety transmission on cloud
CN113904868A (en) IPsec-based remote network management method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination