Enhanced mixed physical isolation method

Abstract

The invention relates to a network isolation method for a peripheral component interconnect (PCI) bus of a computer, which is implemented by a PCI bus interface, a PCI control chip, a network switching unit and a hard disk switching unit. By adopting a mode of bus control, a control signal on the PCI bus is read by a CH364P chip, physical isolation of internal and external networks can be realized by a computer user only using a physical isolation card and hard disk memory equipment, and the user can connect only a set of network within same time, so that the different networks cannot be interconnected, the physical isolation of the networks is realized finally, danger brought by attacks among the networks is avoided effectively, and the safety of the networks is ensured.

Description

technical field [0001] The invention relates to a physical isolation method in the field of network information security, in particular to a network isolation method for a computer PCI bus. Background technique [0002] The wide application of the Internet has greatly enriched people's lives, improved people's work efficiency, and also brought convenience to virus damage and hacker intrusion. Although people use dual network systems, firewalls, proxy servers, and dedicated computer network physical isolation devices and other security measures, but these technologies have great defects. Although the dual network system can effectively guarantee the security of data, the network construction cost of this method is relatively high, and the operation is very inconvenient; the application of firewall and proxy server only connects the user terminal with the The Internet has been logically isolated, which cannot effectively prevent the intrusion of external hackers; the applicati...

AI Technical Summary

Problems solved by technology

[0002] The wide application of the Internet has greatly enriched people's lives, improved people's work efficiency, and also brought convenience to virus damage and hacker intrusion. Although people use dual network systems, firewalls, proxy servers, and dedicated computer network physical isolation devices and other security measures, but these technologies have great defects. Although the dual network system can effectively guarantee the security of data, the network construction cost of this method is relatively high, and the operation is very inconvenient; the application of firewall and proxy server only connects the user terminal with the The Internet has been logically isolated, which cannot effectively prevent the intrusion of external hackers; the application of special computer network physical isolation devices makes the operation very inconvenient, and the long delay of network switching and the elimination of serial ports also make special computers Applications of network physical isolation devices are limited

Therefore, the above network security measures cannot meet the data security requirements of the government, military, finance, telecommunications and enterprises.

In addition, the core software and hardware currently used in our country rely on imports, and there is no guarantee that there are no malicious plug-ins and devices in these software and hardware, so there are certain security risks

Only when our working terminal equipment is not physically connected to the Internet, can our data security be effectively guaranteed, and after the physical connection between the internal network and the Internet is cut off, people will not be able to collect the rich information resources on the Internet

Images