High-reliability safety isolation and information exchange method

Abstract

The invention discloses a high-reliability safety isolation and information exchange method which comprises the steps of: initializing authentication: generating a secret key according to hardware information by a sender, and storing the received secret key and opposite side information by a receiver; encrypting data by adopting the secret key by the sender after embedding the identity information into the data to be sent, carrying out data decryption by using the stored secret key of the sender after the receiver receives the data, extracting identity information of the sender, and comparingwith the stored opposite side identity information for ensuring the identity reliability of two communication parties, wherein once any one communication party in the communication process replaces equipment, the communication can not be completed; and carrying out characteristic extraction on programs of various processes by the receiver during the communication, comparing with the program characteristic stored in the authentication initialization in real time, and carrying out program integrity correction for preventing a spite user from attacking to cause that the programs are corrected, such as embedding unreliable operations and the like. The invention further enhances the communication safety and confidentiality by using encryption.

Description

field of invention [0001] The invention relates to a security-enhanced security isolation and information exchange platform, which is used to ensure reliable information isolation and interaction process, and belongs to the technical field of information security. Background technique [0002] Security isolation and information exchange equipment is a kind of network security equipment developed with e-government and paperless office. It is used to realize data communication between networks with different levels of security or between internal and external networks. The main differences from network firewalls are as follows What time is it: [0003] 1. The network firewall is a blacklist device, that is, the network firewall prohibits disallowed applications, and the non-prohibited applications are allowed to pass through the firewall. The security isolation and information exchange equipment belongs to the white list device, that is, only the allowed applications can pass ...

AI Technical Summary

Problems solved by technology

[0008] The existing security isolation and information exchange system framework does not consider the issue of confirming the identity of the data sender and receiver, and does not involve data security protection during data transmission. Once a malicious user or hacker can obtain information between two hosts or devices The transmission data will endanger the data security

Images