Data autonomous safe transmission device

Abstract

The invention discloses a data autonomous safe transmission device, which is used for connecting two different physical isolation networks, and comprises a first end processor and a second end processor; the first end processor is used for carrying out forward preprocessing on the data after receiving a request access data packet sent by a user, copying the preprocessed data to the second end processor through USB ferry and a private protocol, receiving feedback data of the second end processor, carrying out reverse preprocessing on the data, and feeding back the preprocessed feedback data to the user through a network layer; the second end processor is used for carrying out reverse preprocessing on the data after receiving the data, sending the preprocessed data to a target service through a network layer, receiving a response request of the target service, carrying out forward preprocessing on the data, transmitting the preprocessed feedback data through USB ferry and a private protocol, and copying the feedback data into the first end processor.

Description

technical field [0001] The invention relates to the technical field of data transmission, in particular to a device for autonomous and secure data transmission. Background technique [0002] In the network office environment of the power industry, there are physical isolation between the internal and external network environment, the office area and the control area environment. Physical isolation, from the perspective of security, greatly improves the security level of the area. However, it also makes it more difficult to share services and data between different regions, or between intranets and intranets, which also leads to low work efficiency, and security incidents may occur when data is transmitted in different regions. [0003] At present, the industry's more conventional approach is to have a variety of models. For example, in terms of business, it generally uses internal and external data ferrying or direct invocation of application interfaces to realize business ...

AI Technical Summary

Problems solved by technology

In these models, some security issues and data synchronization issues can be solved at any time, but the entire business sharing and security protection are fragmented and scattered. Coarse-grained security protection and sharing control at the network layer can be achieved, but security protection and sharing control at the application function level and application data level cannot be implemented; management is also separated, and information sharing policies are generally maintained by the application department, and the security department can only be in the Extensive security management at the network layer is implemented on the border protection measures, and professional fine-grained security management at the application level cannot be performed

Images