A security isolation control system

Abstract

The invention discloses a security isolation management and control system. The security isolation management and control system is provided with an identification subsystem, a management and control operation subsystem and a comprehensive processing subsystem, wherein the identification subsystem and the management and control operation subsystem are used for carrying out data protection on a network data layer and a high-layer protocol layer and management and control on a business and a behavior of a user, and the comprehensive processing subsystem is used for carrying out further comprehensive processing on a data package screened out by a front end device and completing the configuration and the management of strategies. Due to the adoption of the technical scheme, according to the security isolation management and control system disclosed by the invention, security protection can be comprehensively carried out on an emergency communication system device and the user, user non-inductivity and device non-inductivity can be met on the premise that the carrier-grade stability of a whole emergency communication system is ensured, and the stereoscopic protection on a private network can be realized through technical means such as network layer data protection, SIP (System In Package) protocol protection, business data protocol protection and user business management and control.

Description

technical field [0001] The invention relates to a security isolation control system, in particular to a system deployed between an emergency communication network and a gateway of a public network to realize comprehensive security protection of IP-based signaling and data. [0002] Involving patent classification number H04 Electric communication technology H04L Transmission of digital information, such as telegraphic communication H04L29 / 00H04L1 / 00 to H04L27 / 00 Apparatus, equipment, circuits and systems not included in a single group H04L29 / 02 Communication control; communication processing H04L29 / 06 Characterized by agreement. Background technique [0003] The emergency communication network and the public network are connected by IP, which will inevitably bring security threats to the original closed private network system. At the same time, the session control protocol of the system itself also has a security loophole to be attacked. The current emergency communication ...

AI Technical Summary

Problems solved by technology

[0008] 1. The existing system mainly isolates the physical path of data between the internal and external networks, and is based on general-purpose hardware equipment entities. Although the isolation effect can be achieved, it cannot meet the requirements for the application scenarios and business requirements of the emergency communication network;

[0009] 2. The existing system only protects a single network topology layer, such as: application layer call flow protection; data link layer DDOS, viruses, Trojan horses, etc., which cannot achieve a comprehensive and comprehensive protection effect;

[0010] 3. The access device needs to change the network topology and increase the network delay, which will have a great impact on the existing network; at the same time, the failure of its own equipment is also a big security risk

Images