Unidirectional physical separation network brake for USB optical fiber

Abstract

The utility model relates to a USB bus-based, physically isolated gateway with unidirectional optical fibers, through which the low security network data can be transmitted in single direction to the high security network for information security field. For maximal security possible, remove the data response signal channel and use optical fiber with unidirectional repeating instrument to eliminate possible secret leakage in electrical coupling from low security network to high security network. The redundancy and journal statistics are used to realize real-time and regular check and analysis of the system for guaranteed integrality in data transmission; and timely remind clients to handle the errors. The low security network data gathered from the low security gateway computer is transmitted to the gateway data input system through a USB interface, and then transmitted to optical fiber input terminal, and through an optical fiber unidirectional repeater to the gateway data output system. After that, the network data is conveyed to the high security gateway computer through another USB interface and finally to the high security network.

Description

technical field [0001] The invention relates to a data isolation one-way transmission method, in particular to a physical isolation gatekeeper based on a USB bus and using a one-way optical fiber, which unidirectionally transmits low-density network data to a high-density network, and is used in the technical field of information security . Background technique [0002] How to realize safe and reliable information transmission between low-density and high-density networks has always been an important issue in the field of information security. In the most demanding environment, data can only be transmitted one-way from the low-density network to the high-density network, and there is no possibility of reverse transmission. To achieve this purpose, the usual method is physical isolation. One method is to manually copy the low-density network data to the mobile medium, and then read the data on the mobile medium to the high-density network. On the one hand, this method is i...

AI Technical Summary

Problems solved by technology

Some gatekeeper devices have security risks in their design

On the one hand, the low-density network and the high-density network are electrically collinear, which may cause high-density data to be transmitted to the low-density network through electrical coupling

On the other hand, when the high-density network receives data, it will actively send a response signal to the low-density network. If this response signal is maliciously used, it may also transmit high-density network data to the low-density network.

Images