基于动态策略的移动警务终端安全管控系统的设计与实现

Design and Implementation of Mobile Police Terminal Security Management and Control SystemBased on Dynamic Strategy

摘要:

对移动警务安全接入平台中的终端设备的安全防护问题进行了研究,提出并研制了一种基于动态策略的移动警务终端安全管控系统,整个系统由客户端、前置服务端和内网服务端组成,前置服务端和内网服务端分别部署在前置区和公安内网,客户端部署在移动终端设备上,确保在移动接入区和公安内网区有效进行物理隔离的前提下,将系统制定的各种安全策略规则下发到客户端执行,规范用户对移动终端的本地软硬件资源和网络资源的使用,实现安全威胁检测、防护及预警,对移动终端用户的违规访问、操作行为进行全面监测和上报,实现终端设备安全和行为的统一管理。

Abstract:

In this paper, we study the security protection of terminal equipment in mobile police security access platform, and proposes and develops a mobile police terminal security management and control system based on dynamic strategy. The whole system consists of client, front-end server and intranet server. The front-end server and intranet server are deployed in front-end area and public security intranet respectively, and the client is deployed in mobile terminal. In term of this, under the premise of physical isolation between the mobile access area and the public security intranet area, all kinds of security policy rules will be distributed to the client for execution, so as to standardize the user"s use of the local software and hardware resources and network resources of the mobile terminal. Meanwhile, the proposed system can realize the detection, protection and early warning of security threats, comprehensively monitor and report the illegal access and operation behavior, and realize the unified management of terminal equipment security and behavior.