A method and system for secure data transmission based on dual hardware

Abstract

The invention discloses a secure data transmission method based dual hardware and a secure data transmission system based dual hardware. The method includes the following steps: (S1) a user downloads data into a mobile storage device from an unclassified network; (S2) the user connects the mobile storage device with an intermediate machine, and the security of the mobile storage device is checked by the intermediate machine; (S3) the intermediate machine stores the secure data passing detection into the cache of a main functional module; (S4) the user downloads the secure data into a secure mobile storage device; (S5) the user connects the secure mobile storage device with a classified network computer and uploads the data. The system comprises the mobile storage device, the intermediate machine and the secure mobile storage device. The invention physically isolates the unclassified network from the classified network and securely transmits data without threats to the classified network computer only after the intermediate machine analyzes the data and checks security, consequently, malicious users and malicious programs including viruses and Trojans are effectively prevented from intruding a classified network, and the data security of the classified network is ensured.

Description

technical field [0001] The invention relates to the field of data security and its secure transmission in the field of information security, in particular to a method and system for secure data transmission based on dual hardware. Background technique [0002] With the improvement of data security requirements of government, military and other confidential departments, how to prevent confidential network data leakage and prevent non-secure data from attacking confidential network has become an important research direction for information security enterprises and scientific research institutions. It is generally believed that physically separating the confidential network and the non-confidential network can effectively guarantee the security of data. In this case, it is particularly critical to ensure the security of data transmission between two physically separated networks. [0003] At present, the existing secure data transmission methods between the confidential networ...

AI Technical Summary

Problems solved by technology

However, the main defect of this method is: when encountering a strong virus, it may cause the system crash of the computer on the security network, and even affect other computers on the security network; Be detected; the attacker has direct access to the security network and can steal data on the security network through illegal means

However, the defect of this method is that when the middle machine system fails, the user has no other way to ensure the safe and timely transmission of information except for using a spare middle machine (purchasing a spare middle machine will increase user costs); when the user needs to transmit information to When in different places, you have to use a non-confidential network to transmit data to the target location, and there are security risks in the process of data transmission in a non-confidential network (such as data may be stolen, tampered with, etc.); the secure data transmission between the confidential network and the intermediate machine cannot be guaranteed The security of the dedicated mobile device itself

Although the confidentiality of this method is strong enough, the disadvantages are also obvious: disc resources are seriously wasted. When the amount of transmitted data is large, due to the limited storage capacity of discs, a large number of discs are required, which is inconvenient to use.

Images