An internal and external network isolation and data exchange device and method based on a unidirectional transmission physical medium

Abstract

The invention discloses an internal and external network boundary isolation and data exchange technology based on a unidirectional transmission physical medium, and relates to the field of informationsecurity. A unidirectional transmission physical medium is used for setting a data bidirectional isolation protection channel; physical network link isolation and logic link communication of internaland external networks are realized; real-time data exchange between an external network and an internal network is realized within a controllable range; The uplink and downlink isolation protection channels in the device are responsible for uplink and downlink data exchange on the two sides of the device respectively, it is guaranteed that only authorized data can reach the other end through thedevice, the isolation layer cannot interact with networks on the two sides of the device, and it is guaranteed that the isolation layer cannot collapse due to external invasion or internal damage. Duplex one-way transmission supported by TCP / UDP full protocols is provided, and the defects that an access control module is placed in an isolation region and cannot directly interact with the two ends,and a firewall is easily invaded by the outside or damaged by the inside are overcome.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for isolating internal and external networks and exchanging data. Background technique [0002] With the rapid development of computer technology, network information security has become an important guarantee for social development, which stores a lot of sensitive information, even state secrets, which will inevitably attract various human attacks from all over the world (such as information leakage, information theft, data tampering, data deletion, computer virus, etc.). During network data exchange, service systems usually have the following two security requirements: [0003] 1. For services on the Internet, it is necessary to solve and prevent security issues from the Internet, and prevent intrusion from the Internet to the service intranet. [0004] 2. The two service systems need to exchange data with each other, and they also need to prevent securi...

AI Technical Summary

Problems solved by technology

[0006] However, the above-mentioned network isolation technology adopts the traditional optical gate isolation implementation scheme and cannot provide real-time transmission services. The access control module directly interacts with both ends of the internal and external networks, and the firewall is vulnerable to external intrusion or internal damage.

Images