Internet of things security access gateway

Abstract

The invention discloses an internet of things security access gateway. A three component framework of 2+1 is adopted in a hardware layer of the gateway. The three component framework comprises an outer host machine, an isolation exchange component and an inner host machine. A filed programmable gate array (FPGA) card based on hardware serves as the isolation exchange component so that isolation of a network and safe and rapid exchange of data are achieved. Device certification, access control, protocol analysis, data security check, data ferry service and audit service are achieved through software layers on the inner host machine and the outer host machine and action of the services can be traced. The internet of things security access gateway has the advantages that relative requirements that data collected by an internet of things perception terminal is introduced to a core network safely are satisfied, network attack, Trojan horse virus transmission and denial of service attack are prevented from being launched through a sensing layer network with weak safety protection to the core network, safe exchange of data is achieved under the condition that the sensing network and the core network are in network isolation, and practical application of the internet of things is achieved under the condition that safety is guaranteed.

Description

technical field [0001] The invention relates to a secure access gateway for the Internet of Things, belonging to the technical field of network information exchange and security isolation. Background technique [0002] At present, traditional security access gateways are mainly aimed at realizing information exchange, access control, and behavior auditing of specific resources by users in the Internet and local area networks; in view of problems such as unclear boundaries, high security risks, and insufficient defense in depth in large-scale networks, traditional firewalls And other security protection technologies are difficult to support, and equipment such as gatekeepers are facing problems such as high cost, difficulty in adapting to the access requirements of multi-protocol equipment at the sensing layer, and complex engineering implementation. And most of the traditional gateways are aimed at the TCP protocol and large data packets, and cannot be optimized for small pa...

AI Technical Summary

Problems solved by technology

The perception layer network has poor security protection capabilities due to its own technical characteristics, and its security level is relatively low compared to the core network

Images