As the first pilot unit for Xinchuang (Information Technology Application Innovation) terminal security management within the Hong Kong Government, the agency requires full lifecycle security management for Galaxy Kylin Xinchuang terminals. This includes remote assistance and operation maintenance (OM), unified software distribution and compliance management, granular USB peripheral control (e.g., authorizing encrypted USB drives, disabling non-standard devices), and centralized system patch deployment and compliance verification. The solution must meet the high-security requirements of law enforcement work, ensuring terminal activities are traceable, policies can be uniformly deployed, OM efficiency is improved, and risks of sensitive data leakage via peripherals or unauthorized software are eliminated.
Challenges
Solution
Deploy the Leagsoft LV7000 Xinchuang Terminal Management Platform, deeply adapted for the Galaxy Kylin operating system to provide native-level management capabilities: achieve remote desktop assistance and command execution via secure channels; utilize a software marketplace for genuine software distribution and blacklist/whitelist management; implement customized USB device policies with strict auditing and control over file operations and external transfers; integrate with Kylin patch sources for automatic system patch deployment and installation status verification. All policies are centrally configured through a unified console, and audit logs are recorded in real-time to meet hierarchical management needs.
Benefits
Post-implementation, the agency achieved unified management of Xinchuang terminals and significantly enhanced operational maintenance efficiency.
As Hong Kong Government's first Xinchuang security benchmark, this project provides a practical model for promoting Xinchuang terminal security management throughout the Hong Kong governmental IT system.
It strengthens the public sector's data security defenses, demonstrates the collaborative capabilities of domestic software and hardware, and offers a critical reference for achieving secure and controllable e-government infrastructure development in the Guangdong-Hong Kong-Macao Greater Bay Area.