Shulou(Shulou.com)11/24 Report--

Under the trend of intelligence and electrification, the form of automobile products has changed from traditional travel tools to mobile intelligent terminals, which makes intelligent vehicles include not only vehicle data, but also urban traffic data and user personal data.

For automobile companies, the protection of data security is not only responsible to customers, but also to their own enterprises; therefore, the compliance department of ideal Automobile, with the rapid development of business, initiated the requirements of information security transformation: not only to have more perfect network access control means to strictly control the configuration of employees' access rights, but also to avoid data leakage caused by terminals.

Ideal Automobile was founded in July 2015, with the mission of "creating a mobile home, creating a happy home". Independent research and development work is mainly focused on its unique extended range system, next-generation electric vehicle technology and smart car solutions. at the same time, launch more pure electric vehicles and add-on electric vehicle products to create the family's preferred luxury electric car brand.

Photo Source: ideal Automobile official website

Two-way Challenge of Network Security and Management system upgrading

If ideal car wants to solve the upgrade of network management system, it is faced with three difficulties:

The scale of the network access upgrade is huge: the upgrade covers all office areas in the country, covering tens of thousands of terminal equipment.

Complex network architecture: the office network runs in a multi-cloud architecture, including local IDC computer rooms and multiple public clouds, which brings difficulties in how to unify nano-management and unified operation and maintenance in different environments.

Network access equipment and access environment and diversification: tens of thousands of devices have different operating systems, in addition, there are some special BOX and other dumb terminals, as well as wired, wireless, external network and other diversified network access, which also makes the new requirement of equipment dimension network management and control become a challenge.

Professional problems should be solved by professional people. With the help of volcano engine, ideal car has established a network management system with identity as the core.

Upgrade step by step to create an one-stop network management strategy

The volcano engine flying team made an in-depth analysis on the application crowd, scene, authority, equipment and other dimensions of the ideal automobile office network, and determined the upgrade and optimization of "identity as the core, creating one-stop network management". And through the gradual upgrade path from the wireless network to the wired network and then to the external network access, it realizes the upgrade of efficient and undisturbed office experience, and solves the difficulties of complex network architecture, diversified access equipment and access environment.

Photo Source: ideal Automobile official website

Wireless network access transformation: complete the configuration of employees' access rights, adopt the way that the original authentication and Feilian authentication are first parallel, and then gradually switch, to ensure the smooth upgrade of wireless access authentication. Online admission policy, covering terminal devices

Wired network access transformation: wired network access authentication is switched to Feilian authentication, which is unified with wireless network access authentication, and equipment is controlled and controlled through access authority and strategy, providing access closed-loop disposal means. solve the security risks caused by random access to domain account authentication

The transformation of enterprise external network access: the original VPN and Feilian VPN are paralleled first and then switched. Through multi-VPN node deployment, ideal employees can access local VPN nodes nearby, and the service access delay is greatly reduced.

"ideal" network access management system, more stable, more efficient and easy to expand

The ideal car successfully landed the "identity-centered network access management system", completed the access and upgrade of tens of thousands of terminal devices, and realized unified management, simplified operation and maintenance, and experience optimization. In addition, there has been a significant improvement in the stability, scalability, and management costs of the architecture compared to the past:

Strong architecture stability: through the deployment of Server active and standby disaster recovery nodes, VPN multi-active disaster recovery nodes and RADIUS active disaster recovery nodes, it can meet the overall high availability and high performance requirements of the ideal automobile system.

High scalability of the architecture: administrators can quickly launch VPN and Radius nodes in the Flying Link management background through simple configuration; without additional configuration of the new management background, IT network changes can meet agile business needs

Low cost of management, operation and maintenance: IT administrators can manage all VPN, Radius nodes and network access policies through an one-stop management background, eliminating the need to switch between multiple platforms and effectively improve management efficiency.

There are many dimensions of management and control: thousands of dumb terminal devices are brought into control, including industry-specific dumb terminals such as BOX, for follow-up development and testing work.

In the future, Feilian will also join hands with the ideal automobile online mobile access strategy to further improve enterprise office access management; at the same time, improve enterprise safety and compliance, strengthen asset security, help ideal reduce costs and increase efficiency, and accelerate innovation.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.