远程服务安全保障技术研究

保障信息化基础环境及平台的安全平稳运行，是全路日常工作的重要内容之一。目前，铁路众多信息化基础环境及平台已具备内部本地高安全有效运维的条件，但在面对远程运维以及可能涉及到的外部多方协作运维等特殊需求时，如何能继续保障操作的安全性、及时性、有效性并实现对其行为的可管、可控和可追溯，仍需要进行不断思考和认真研究。针对工作场景中面临的以上实际情况，结合作者多年的实践经验和技术积累，从安全传输认证、云桌面及企业移动管理（EMM，Enterprise Mobility Management）等角度进行了技术分析和思考，归纳出3种远程服务安全保障模式，对如何利用多种资源助力信息化安全平稳运维给出了相应的建议和意见。

Research on remote service security technology

To ensure the safe and stable operation of the informatization infrastructure environment and platform has become an important task in the daily work of the whole railway.At present, many railway informatization infrastructure environments and platforms have the conditions of internal and local high safety and effective operation and maintenance. However, in the face of special needs such as remote operation and maintenance and external multiparty cooperation operation and maintenance that may be involved, how to continue to ensure the safety, timeliness and effectiveness of operation, and to realize the manageability, controllability and traceability of its behavior still needs constant thinking and serious research.In view of the above actual situation in the work scene, combined with the author's many years of practical experience and technical accumulation, this article carried out technical analysis and thinking from the perspective of secure transmission authentication, cloud desktop and EMM, summed up three kinds of remote service security guarantee modes, and gave corresponding suggestions and opinions on how to use various resources to assist the safe and stable operation and maintenance of informatization.