Mostly used for the development of USP bastion machine projects, mainly applied in banking and finance projects
The USP (Unified Security Platform) bastion machine controls user access to the host through unified real name management and authentication, achieving pre management of host operation and maintenance business; By recording and monitoring user operation and maintenance communication session information, achieve in-process monitoring; Implement post audit by replaying and querying host operation logs.
Supports load balancing and system cascading, with a restful API interface that can be integrated with ITSM, CMDB, automated operations, monitoring systems, cloud management platforms, email, SMS, and daily operations Integration of log analysis system and database audit system
Intelligent implementation of multi factor identity authentication for dynamic tokens, mobile SMS, static passwords, and biometrics, completing intelligent authorization and intelligent audit log analysis
Through encryption filtering, data backup, digital signature, identity authentication, permission management and other technical methods, system security, data security, transmission security, and refined operation and maintenance auditing have been achieved, ensuring system security and reliability
整合興業(yè)銀行的資源,提高興業(yè)銀行的身份認(rèn)證安全等級,使用戶身份信息管理、授權(quán)信息管理、身份認(rèn)證、訪問控制機(jī)制和安全審計機(jī)制規(guī)范化、標(biāo)準(zhǔn)化,提高興業(yè)銀行整體T 資產(chǎn)的管理能力和風(fēng)險防范能力。
實(shí)現(xiàn)運(yùn)維人員身份認(rèn)證、運(yùn)維操作和訪問控制、設(shè)備密碼的統(tǒng)一管理,實(shí)現(xiàn)集中的用戶訪問痕跡跟蹤和審計。全面加強(qiáng)運(yùn)維操作的事前授權(quán)、事中監(jiān)控、事后審計,進(jìn)一步降低本行生產(chǎn)系統(tǒng)的運(yùn)維操作風(fēng)險,實(shí)現(xiàn)全行運(yùn)維人力資源統(tǒng)一調(diào)度,實(shí)現(xiàn)跨區(qū)域、跨機(jī)房維護(hù),提高運(yùn)維工作效率,保障全行各信息系統(tǒng)。
為建行各應(yīng)用系統(tǒng)提供統(tǒng)一的多樣化的認(rèn)證機(jī)制,建立統(tǒng)一的用戶信息模型和唯一視圖,完善用戶身份信息管理,減少安全漏洞,使授權(quán)和訪問控制策略規(guī)范化,便于監(jiān)控和審計,并減少各系統(tǒng)建設(shè)對認(rèn)證和訪問控制的重復(fù)開發(fā),提高業(yè)務(wù)創(chuàng)新的能力和系統(tǒng)開發(fā)效率。
為中信銀行總行系統(tǒng)運(yùn)行中心的各種不同版本和類型的操作系統(tǒng)(AIX/HP-UX/SCO/REDHAT LINUX/WINDOWS/AS400)(總計3萬余臺設(shè)備,近10萬余個帳戶)提供統(tǒng)一的運(yùn)維內(nèi)控審計服務(wù)。
為廣發(fā)銀行的各種不同版本和類型的操作系統(tǒng)的主機(jī)(AIX/REDHAT LINUX/WINDOWS)提供統(tǒng)一的安全運(yùn)維管理服務(wù)。
為交通銀行總行數(shù)據(jù)中心的各種不同版本和類型的操作系統(tǒng)的主機(jī)(AIX/HP UNIX/SOLARIS/SUSE LINUX/WINDOWS/OS390)和各種用途和型號的網(wǎng)絡(luò)設(shè)備(總計近千余臺設(shè)備,近7000余個帳戶)提供統(tǒng)一的安全運(yùn)維管理服務(wù).