Isolation gateway

Abstract

The invention discloses an isolation gateway, which comprises identity authentication modules A and B and data acquisition modules A and B, wherein the identity authentication module A and the data acquisition module A are used for connecting with a network A; and the identity authentication module B and the data acquisition module B are used for connecting with a network B. In the process of transmitting information to the network B from the network A, the information is required to be transmitted from the identity authentication module A to the data acquisition module B, and a transmission path from the identity authentication module A to the data acquisition module B is unidirectional and irreversible. In the process of transmitting the information from the network B to the network A, the information is required to be transmitted from the identity authentication module B to the data acquisition module A, and the transmission path from the identity authentication module B to the data acquisition module A is unidirectional and irreversible. The isolation gateway has the advantages of (1) realizing bidirectional transmission, (2) reducing the probability of intercepting all bidirectionally transmitted data, (3) increasing the bidirectional transmission bandwidth of the isolation gateway with relatively lower cost, and (4) preventing connection between an internal network and an external network from being directly established in a way of bypassing the gateway and avoiding the influence of the increasing of the transmission bandwidth of the gateway on security.

Description

technical field [0001] The invention relates to an isolation gatekeeper for realizing network isolation. Background technique [0002] Existing isolation gatekeepers for network isolation such as figure 1 , the external network is an external network with low security, and the internal network is an internal private network with high security. Under normal circumstances, the external network and the internal network are completely disconnected. The isolation gatekeeper is located between the two networks, including consoles and storage media. When there is data to be transmitted from the intranet to the extranet, the first step is to figure 2 As shown in , a connection is established between the console and the intranet host, data is sent from the intranet host to the console, and the console strips the protocol to separate the data and write the data to the storage medium. After the writing of the console is completed, the connection with the intranet host is disconnec...

AI Technical Summary

Problems solved by technology

The above-mentioned unresolved contradiction exists between the transmission bandwidth and security of the existing isolation gatekeeper. This is because the two-way transmission of data passing through the isolation gatekeeper is carried out in the same physical medium, and there is a possibility of establishing a connection.

Images