Information safe transmission control method between inside network and outside network and gateway thereof

Abstract

The invention discloses an information safe transmission control method between an inside network and an outside network and a gateway thereof. An inside network gateway and an outside network gateway are respectively arranged between an inside industrial network and an outside public network. The inside industrial network is connected with the inside network gateway; the outside public network is connected with the outside network gateway through a network interface; and the inside network gateway and the outside network gateway are connected through a serial port. When the outside network gateway receives the data of the network interface from the outside public network, safety check is carried out to the received data of the network interface and the data source, and the data of the network interface passing the safety check is converted as the industrial protocol data of the serial port and sent to the inside network gateway through the serial port; and the data is sent to a targeted address through the inside network gateway. The gateway transmission manner realizes the double isolation of the hardware interface and the software protocol between the inside network and the outside network so as to effectively prevent the inside network from being attacked by outside adverse programs and ensure the security of the inside network.

Description

technical field [0001] The invention relates to a network security control technology, in particular to a gateway technology. Background technique [0002] With the rapid development of industrial automation control, more and more industrial enterprises use their internal (or private) network to interconnect their production process special equipment or industrial intelligent equipment (Intelligent Electric Device, referred to as "IED") to form a production Control system network. Generally speaking, the production control system network should have some special structures and functions to meet the requirements of industrial automation control. [0003] In recent years, with the continuous growth of the number of Internet users, there are more and more business applications based on IP (Internet Protocol, Internet Protocol) networks. However, while IP technology has become the mainstream technology for building network applications, its inherent simplicity The essential ch...

AI Technical Summary

Problems solved by technology

[0005] 1. The firewall cannot resist the latest attack virus with no policy set

2. Most of the attacks on the legally opened ports of the server cannot be prevented by the firewall

3. Firewalls generally cannot prevent internal attacks that actively initiate connections

4. The firewall itself will also have problems and be attacked: it may also be attacked and have software / hardware failures

Images