Network kugoverana kwekriptographic token pakati peusbip-based vashandisi

Nezvekuchinja kwemutemo maererano neruvimbo masevhisi ("About electronic trust services" Ukraine), bhizinesi rinoda kuti madhipatimendi akati wandei ashande nemakiyi ari pamatokens (parizvino, mubvunzo wenhamba yemakiyi ehardware ichiri kuvhurika. )

Sechishandiso chine mutengo wakaderera (pasina muripo), sarudzo yakabva yadonha usbip. Sevha paUbintu 18.04 yakatanga kushanda nekuda kwekuburitswa Kugadzirisa USB/IP uye yakayedzwa zvakabudirira pane akati wandei flash drive (nekuda kwekushaikwa kwechiratidzo panguva iyoyo). Hapana matambudziko akakosha kunze kwekuva muridzi (kuchengetera mushandisi) akaonekwa panguva iyoyo nenguva. Zviri pachena kuti kuitira kuronga kuwana kwevashandisi vakati wandei (zvishoma zviviri, kutanga), zvinodikanwa kugovera kuwana kwavo nenguva uye kuvamanikidza kuti vashande vachichinjana.

Mubvunzo waive: Ndingazviita sei nekutamba kushoma kuti zvese zvishande kune wese...

Chikamu chacho chakaoma

Network kugoverana kwekriptographic token pakati peusbip-based vashandisi
Sarudzo XNUMX. Mapfupi akati wandei ekubhati mafaera, anoti
a) Kubatanidza kiyi yekupinda.
b) Kubvisa nemaune.

Ndima "Π±Β» kukakavara, saka zvakasarudzwa kupa nguva yekushanda nekiyi pamaminitsi matatu.

Iyo peculiarity yemutengi weusbip ndeyekuti mushure mekunge yatangwa, inoramba yakaturika mukoni; pasina kukanganisa chikamu chekoni, unogona kuvhara chinongedzo "zvichida" kubva kudivi revatengi uye zvakare kubva kudivi reseva.

Hezvino izvo zvakashanda zvakanaka kwatiri:

kutanga: kubatana on.bat

usbip -a 172.16.12.26 4-1
msg * "Подпись/Ρ‚ΠΎΠΊΠ΅Π½ нСдоступны ΠΈΠ»ΠΈ заняты "

chechipiri: shutdown off.bat

ping 127.0.0.1 -n 180
taskkill /IM usbip.exe /F

Pasina kuvimba nekuziva kwemushandisi, zvinyorwa zvakabatanidzwa kuita chiratidzo.bat

on.bat | off.bat

Chii chinoitika: mafaira ose ari mufaira imwe chete, yakatangwa netoken.bat faira, kana kubatana kwakavharwa mushandisi pakarepo anogamuchira mharidzo pamusoro pekiyi isingawaniki, mune imwe nyaya, mushure me180 pings. Mitsara iri pamusoro yekodhi inogona kuve yakagadzirirwa "@ECHO OFF" uye nhungamiro yekoni ku "> nul" kuitira kuti usavhunduse mushandisi zvakanyanya, asi hazvifanirwe kumhanya kuyedza. Yekutanga "kumhanya" pa USB drive yakaratidza kuti zvese zvaigoneka, zvakavimbika, uye zvakajeka. Uyezve, hapana manipulations anodiwa kubva kudivi reseva.

Network kugoverana kwekriptographic token pakati peusbip-based vashandisi

Nomuzvarirwo, kana uchishanda zvakananga nechiratidzo, zvese hazvina kuenda sezvaitarisirwa: nekubatana kwemuviri mune maneja wemidziyo, chiratidzo chinonyoreswa se 2 zvishandiso (WUDF uye smart kadhi), uye ine network yekubatanidza chete seWUDF (kunyangwe izvi zvakakwana kukumbira PIN kodhi).

Network kugoverana kwekriptographic token pakati peusbip-based vashandisi

Zvinoitikawo kuti hutsinye "taskkill" haina kunyanya kuoma, uye kuvhara kuwirirana pamutengi kune dambudziko uye kunyange kana yakabudirira, haivimbisi kumuvharira pavhavha.

Mushure mekubayira zvese zvinonyaradza pamutengi, yechipiri script yakatora fomu:

ping 127.0.0.1 -n 180 > nul
taskkill /IM usbip.exe /F /T  > nul
ping 127.0.0.1 -n 10 > nul
taskkill /IM conhost.exe /F /T  > nul

kunyangwe kushanda kwayo kuri pasi pe50%, sezvo sevha yakasindimara ichiramba ichifunga nezvekubatanidza yakavhurika.

Matambudziko nekubatana akatungamira kune pfungwa dzekusimudzira server side.

Server chikamu

Zvaunoda:

  1. Bvisa vashandisi vasingashande kubva pasevhisi.
  2. Ona kuti ndiani parizvino ari kushandisa (kana achiri kukwereta) chiratidzo.
  3. Ona kana chiratidzo chakabatana nekombuta pachayo.

Aya matambudziko akagadziriswa uchishandisa crontab uye apache masevhisi. Iyo discrete chimiro chekunyorazve mamiriro ekutarisa mhedzisiro yemapoinzi 2 uye 3 anotifarira anoratidza kuti iyo faira system inogona kuwanikwa pane ramdrive. Yakawedzerwa mutsara ku /etc/fstab

tmpfs   /ram_drive      tmpfs   defaults,nodev,size=64K         0       0

Iyo script folda ine zvinyorwa yakagadzirwa mumudzi: kudzikisa-kuisa chiratidzo usb_restart.sh

usbip unbind -b 1-2
sleep 2
usbip bind -b 1-2
sleep 2
usbip attach --remote=localhost --busid=1-2
sleep 2
usbip detach --port=00

kuwana runyorwa rwezvishandiso zvinoshanda usblist_id.sh

usbip list -r 127.0.0.1 | grep ':' |awk -F ":" '{print $1}'| sed s/' '//g | grep -v "^$" > /ram_drive/usb_id.txt

kuwana runyoro rweanoshanda IPs (nekuzogadziridzwa kunotevera kuratidza maID ID) usbip_client_ip.sh

netstat -an | grep :3240 | grep ESTABLISHED|awk '{print $5}'|cut -f1 -d":" > /ram_drive/usb_ip_cli.txt

iyo crontab pachayo inoita seizvi:

*/5 * * * * /!script/usb_restart.sh > /dev/null 2>&1
* * * * * ( sleep 30 ; /!script/usblist_id.sh > /dev/null)
* * * * * (sleep 10 ; /!script/usbip_client_ip.sh > /dev/hull)

Saka isu tine: yega yega 5 maminetsi mushandisi mutsva anogona kubatana, zvisinei kuti ndiani akashanda nechiratidzo. Iyo / ramdrive folda yakabatana kune http server uchishandisa symlink, umo 2 mameseji mafaera anochengetwa, achiratidza chimiro cheusbip server.

Chikamu chinotevera: "Zvakashata mune wrapper"

Sarudzo II. Kufadza mushandisi zvishoma neinenge isinga tyisidzire interface. Kukatyamadzwa nenyaya yekuti vashandisi vane mavhezheni akasiyana eWindows ane masisitimu akasiyana, kodzero dzakasiyana, nzira isinganetse kupfuura. Razaro Ini handina kuiwana (ini ndiri yeC #, asi kwete mune iyi kesi). Iwe unogona kuvhura mafaira echiremwareta kubva kune iyo interface kumashure, yakaderedzwa, asi pasina kuyedzwa kwakaringana, ini pachangu ndine maonero: iwe unofanirwa kuiona kuti utore kusagutsikana kwemushandisi.

Network kugoverana kwekriptographic token pakati peusbip-based vashandisi

Aya anotevera mabasa akagadziriswa neiyo interface uye software:

  1. Inoratidza kana tokeni iri kubatikana parizvino.
  2. Pakuvhurwa kwekutanga, kuseta kwekutanga kunosanganisira kugadzira iyo "chaiyo" bat mafaera ayo anoshandisa kutangisa uye kukanganisa kweseshini nesevha yechiratidzo. Pakunotanga kunotevera, kushandiswa kwe "sevhisi" modhi uchishandisa password.
  3. Kutarisa kuvepo kwekubatana neserver, semhedzisiro iyo inovhota ingave yakabatikana kana kuratidza mameseji nezvematambudziko. Kana kutaurirana kunotangazve, chirongwa chinotanga kushanda nenzira yakajairika.

Kushanda neWEB server kunoitwa uchishandisa iyo yekuwedzera fphttpclient snap-in.


pano pachava chinongedzo kune yazvino vhezheni yemutengi

kune zvakare zvimwe zvinotariswa pamusoro penyaya yechinyorwa, pamwe nechikamu chekutanga kufarira kweVirtualHere chigadzirwa chine maficha...

Source: www.habr.com

Voeg