CN100469075C - A VPDN E-government System Realizing Network Approval and Office - Google Patents

Abstract

The invention discloses an e-government system in which VPDN realizes network approval and office work, including: LAC dial-up access server, first authentication server, second authentication server, information release system server and information processing system server; LAC dial-up access server The input end is connected to the user terminal, the output end is connected to the first authentication server, the first authentication server is connected to a server provided with a virus firewall through a router, and the output end of the server is connected to the input end of the LNS access router. The output end of the LNS access router is connected to the second authentication server and the information distribution system server, and the output end of the second authentication server is connected to the information processing system server. By establishing an independent dedicated channel and dual authentication, the present invention ensures that users can safely and conveniently declare online social security and taxation on the website, which not only greatly improves the work efficiency of declaration, but also saves costs for enterprises and society.

Description

A VPDN E-government System Realizing Network Approval and Office

technical field

The invention relates to a network declaration method for insurance, taxation and the like.

Background technique

The Social Security Bureau sends various forms to be filled out to the masses, enterprises and institutions every year, and the number is quite large. These insured individuals, insured units, and related subordinate insured institutions all need to go to the social insurance center to handle relevant business and fill in relevant forms, thus causing a great waste of manpower, material resources and time. Since the information related to social security has different degrees of confidentiality, there is no guarantee of security if simply using a common network connection method. The same problem exists with tax declarations.

Contents of the invention

Aiming at the current problems, the purpose of the present invention is to provide a VPDN electronic government affairs system that realizes network approval and office work. Users can safely make network declarations without leaving home, which greatly improves the efficiency of social security, taxation and other declaration work. efficiency.

In order to achieve the above object, a kind of VPDN of the present invention realizes the e-government system of network examination and approval and office work including: LAC dial-up access server, first authentication server, second authentication server, information distribution system server and information processing system server; Said LAC The input end of the dial-up access server is connected to the user terminal, and the output end is connected to the first authentication server. The first authentication server is connected to the server provided with a virus firewall through a router, and the output end of the server is connected to the input of the LNS access router. The output end of the LNS access router is connected to the second authentication server and the information distribution system server, and the output end of the second authentication server is connected to the information processing system server; wherein, each part performs data processing according to the following steps transmission:

1) The user dials in to the LAC dial-up server through a wired or wireless network, and then enters the first authentication server for identity verification, wherein the user's identity information is obtained from the declared institution, and is preset in the first authentication server by the declared institution. server;

2) When confirming that the user is a legitimate user, the router at the opposite end establishes a VPDN dedicated channel;

3) the user's data packet is checked before entering the LNS access router from the router, that is, the server provided with a virus firewall judges whether it is infected with a virus or belongs to a malicious attack;

4) When it is judged that there is no virus or does not belong to a malicious attack, it is accessed by the LNS access router, and it is judged whether it is an ordinary user or a declared user. If it is an ordinary user, the LNS access router points to the information release system server to perform For related data browsing, if it is a reporting user, the second authentication server will perform verification again to ensure safety. After passing through the second authentication server, operations such as declaration and cash payment will be performed on the information processing system server, wherein the authentication The information is preset in the second authentication server by the declared institution.

By establishing an independent dedicated channel and dual authentication, the present invention ensures that users can safely and conveniently declare online social security and taxation on the website, which not only greatly improves the work efficiency of declaration, but also saves costs for enterprises and society.

Description of drawings

Fig. 1 is a structural representation of the present invention;

Fig. 2 is a flowchart of the present invention.

Detailed ways:

As shown in Figure 1, the present invention comprises: LAC dial-up access server 1, the first authentication server 2, the second authentication server 6, information distribution system server 8 and information processing system server 7; The input end of LAC dial-up access server 1 Be connected with the user terminal, the output end is connected with the first authentication server 2, the first authentication server 2 is connected with the server 4 provided with the virus firewall through the router 3, the output end of the server 4 is connected with the input end of the LNS access router 5, The output end of this LNS access router 5 is connected to the second authentication server 6 and the information distribution system server 8, and the output end of the second authentication server 6 is connected to the information processing system server 7; as shown in Figure 2, wherein, each part follows the following steps For data transfer:

1) The user dials in to the LAC server through a wired or wireless network, and then enters the first authentication server for identity verification, wherein the user's identity information is obtained from the declared institution, and is preset by the declared institution on the first authentication server ;

2) When confirming that the user is a legal user, the router at the opposite end establishes a VPDN dedicated channel, that is, during the process of establishing a connection between the user and the LNS through negotiation of the Link Control Protocol (LCP), the LAC and the first authentication server use CHAP or PAP to partially authenticate the user, Including verification of user name and password to determine whether the user is a VPDN customer. If the user is not a VPDN user, continue to authenticate to see whether the user can access the Internet or other related services; if the user is a VPDN customer, it will be mapped to a designated LNS access router;

3) the user's data packet is checked before entering the LNS access router from the router, that is, the server provided with a virus firewall judges whether it is infected with a virus or belongs to a malicious attack;

4) When it is judged that there is no virus or does not belong to a malicious attack, it is accessed by the LNS access router, and it is judged whether it is an ordinary user or a social security user. If it is an ordinary user, the LNS access router points to the information release system server to perform Relevant data browsing, if it is a social security user, will be verified again by the second authentication server to ensure safety. After passing the second authentication server, the social security declaration and cash payment will be performed on the information processing system server of the social security center. , the authentication information is preset in the second authentication server by the declared institution.

The present invention can be applied not only to social security declaration, but also to tax declaration and the like.

Claims (1)

1, a kind of VPDN realizes the electronic government affairs system of network approval and office, it is characterized in that, comprising: LAC dialup access server, first certificate server, second certificate server, information issuing system server and information processing system server; The input of described LAC dialup access server links to each other with user terminal, output connects described first certificate server, this first certificate server links to each other with the server that is provided with virus firewall by router, this output that is provided with the server of virus firewall links to each other with the input of LNS couple in router, the output of this LNS couple in router connects described second certificate server and information issuing system server, and the output of described second certificate server connects described information processing system server; Wherein, various piece is carried out transfer of data according to following steps:

1) user is by wired or wireless net dial-up access LAC dialup access server, enter first certificate server then and carry out authentication, wherein, user's identity information is obtained from declaring mechanism, and is set in advance at described first certificate server by declaring mechanism;

Set up the VPDN designated lane by the router of opposite end when 2) confirming the user for validated user;

3) the user's data bag carried out safety detection before described router enters the LNS couple in router, and promptly being judged whether to infect by the server that is provided with virus firewall has virus or do not belong to malicious attack;

4) do not inserted by described LNS couple in router when being judged when having virus or not belonging to malicious attack, and judgement is domestic consumer or declares the user, if domestic consumer, the browsing data of being correlated with then by this LNS couple in router directional information delivery system server, if declare the user, then verify once more to guarantee safety by second certificate server, through behind described second certificate server, on the information processing system server, declare, pay the cash operation, wherein, authentication information is set in advance in described second certificate server by declaring mechanism.

Images