Single processing system and network security isolation method based on hardware data conversion technology

Abstract

The invention provides a uniprocessing system based on a hardware data transformation technology and a network security isolation method thereof, wherein the system and method have advantages of high security and reliability, simple structure, convenient maintenance, and high efficiency. According to the invention, the system is deployed at a network boundary that needs to protect an inner network from being attached by an outer network and prevent leakage of data of the inner network to the outer network; and unidirectional information inputting from a low-security zone of the outer network to a high-security zone of the inner network in fields including but not limited to government and defense fields as well as unidirectional information transmission from a high-security zone of the inner network to a low-security zone of the outer network in the industrial control field can be realized. On the basis of combination of the uniprocessing system with the hardware network protocol unloading structure, a TCP / UDP application layer data flow at a network input / output terminal is monitored and the application data flow direction and the return data channel width are limited. Therefore, the structure becomes simple, the maintenance becomes convenient, and the operation becomes reliable, and the efficiency is substantially improved; and the system and the method are suitable for the uniprocessing security isolation network boundary with the high bandwidth flow requirement.

Description

technical field [0001] The present invention relates to a method and system for network security isolation, in particular to a single processing system based on hardware data transformation technology and a network security isolation method, which are applied to protect the internal network from external network attacks or prevent internal network data from being exported to the outside world. The network boundary of network leakage belongs to the technical field of computer network security isolation. Background technique [0002] With the widespread use of computer and network technology, for an internal network system of an enterprise or functional department that is directly connected to the external public network, its network security features usually require that the internal network and the external network realize the necessary information communication at the same time. , which can effectively protect the internal network from illegal intrusion attacks from the ext...

AI Technical Summary

Problems solved by technology

However, this method has the following problems: the use of two sets of processing systems, the structure is complex, and it is easy to increase the probability of failure, and it needs to be configured separately for the two sets of processing systems, so the maintenance operation is complicated; reconnection, timeout, blockage, interruption, etc. occur in the internal and external networks. In the event of an error, the processing process will be very complicated, and because the two processing systems are independent of each other, an internal data exchange mechanism is required between them to ensure reliable data transmission; the CPU completes the TCP / IP protocol network traffic processing, especially for Gigabit and above network environment, which will take up a lot of CPU resources and lead to a decrease in the efficiency of network data transmission

Images