知搜-全球专利检索

  1. 登录
  2. 注册
发明公开
CN109934011A 一种应用于运维审计系统的数据安全分区方法 无效 - 驳回

一种应用于运维审计系统的数据安全分区方法
摘要：
本发明公开了一种应用于运维审计系统的数据安全分区方法，将运维审计系统划分为运维目标、运维接入区和操作区三个部分，其中操作区包括监控管理区，运维办公区和业务办公区；数据库客户端运行在运维审计系统的应用虚拟化服务器上，运维人员在个人操作机上无法通过数据库客户端直接将数据保存至本地；切断运维操作机与应用虚拟化服务器之间的文件按传输、数据拷贝通道，防止运维人员将数据库文件导出到虚拟化服务器上后再上传到运维操作机上。本发明能够有效解决现有的运维审计系统在日常运维中，运维人员能直接访问某些数据甚至导出到本地，这些数据没有相应的安全措施来保护，存在被非法利用的风险的问题。
摘要（英）：

The invention discloses a data security partitioning method applied to an operation and maintenance auditing system. The operation and maintenance auditing system is divided into three parts, namely an operation and maintenance target, an operation and maintenance access area and an operation area. The operation area comprises a monitoring management area, an operation and maintenance office areaand a business office area. The database client runs on an application virtualization server of the operation and maintenance auditing system, and operation and maintenance personnel cannot directly store data to the local through the database client on a personal operation machine. And a file transmission and data copying channel between the operation and maintenance operation machine and the application virtualization server is cut off, so that operation and maintenance personnel are prevented from exporting database files to the virtualization server and uploading the database files to theoperation and maintenance operation machine. The method can effectively solve the problems that in daily operation and maintenance of an existing operation and maintenance auditing system, operation and maintenance personnel can directly access certain data and even export the data to the local, no corresponding safety measure is provided for protection of the data, and the risk of illegal utilization exists.

0/0