Method and system for realizing data exchange between isolation networks

Abstract

The invention discloses a method and a system for realizing data exchange between isolation networks. The method comprises the steps that networks are isolated through a gatekeeper, an isolation region is respectively built in the isolated network, and in addition, service used for receiving and sending data is deployed at the middle part of the isolation region; the gatekeeper is utilized for ferrying data in the isolation region for realizing the data exchange between the isolation networks. The method and the system have the advantages that through the combination of the gatekeeper and the service used for receiving and sending data, the data exchange between the isolation networks such as a trust network (also called as a special network) and an untrusted network is automatically realized, and the untimely problem caused by manual sorting in the prior art is solved; meanwhile, since the service used for receiving and sending data is built in the isolation region, the problems of data redundant accumulation, directory disorder and the like are solved.

Description

technical field [0001] The invention relates to data exchange technology, in particular to a method and system for realizing data exchange between isolated networks. Background technique [0002] At present, data exchange between isolated networks is exchanged through physical isolation gatekeepers. Since there are no protocols such as physical connection, information transmission command, and information transmission between the two independent networks connected through the physical isolation gatekeeper, but only the non-protocol "ferry" of data files, therefore, theoretically, the two isolation The real security isolation is completely realized between the networks. [0003] The data exchange between isolated networks is carried out in the form of files, which roughly includes: the data exchange between isolated networks (trusted network and untrusted network) is manually copied, that is, copied to the gatekeeper configuration in the form of files In the migration direc...

AI Technical Summary

Problems solved by technology

[0005] From the point of view of the existing method of realizing data exchange between internal and external networks, that is, between isolated networks, automatic management cannot be realized, and there is confusion in directory management; the receiving directory configured by the gatekeeper cannot be cleaned up in time, resulting in data accumulation

If only one receiving directory is configured, the multi-service system cannot determine whether all services have received data packets when receiving, and cannot delete the data in the receiving directory, which will also cause the accumulation of data packets

At the same time, there is no way of knowing packet loss and thus whether a successful reception was achieved

Images