Security data interaction structure and method based on optical isolation technology

Abstract

The invention relates to a security data interaction structure and method based on the optical isolation technology, and belongs to the technical field of information security. The security data interaction structure and method solve the problem of ferry attack existing in the prior art. The security data interaction structure comprises a transmitting end user interface, a parallel-serial conversion chip, an optical fiber integrated receiving and transmitting module, a serial-parallel conversion chip and a receiving end user interface. The optical fiber integrated receiving and transmitting module comprises an electro-optic conversion module, a transmitting end opto-isolator, a receiving end opto-isolator and a photoelectric conversion module, wherein the electro-optic conversion module, the transmitting end opto-isolator, the receiving end opto-isolator and the photoelectric conversion module are packaged inside the optical fiber integrated receiving and transmitting module. The transmitting end opto-isolator is arranged on the electro-optic conversion module. The receiving end opto-isolator is arranged on the photoelectric conversion module. The transmitting end opto-isolator is connected with the receiving end opto-isolator through single mode fibers. According to the security data interaction structure and method based on the optical isolation technology, the absolute unidirectionality of a communication link is ensured on the basis of the physical principle, safe and reliable data transmission between a networked computer and a non-networked computer can be achieved, and the ferry attack can be effectively resisted.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a security data interaction method based on optical isolation technology. Background technique [0002] The ferry attack is the most common attack method on the Internet. Its attack principle is to hide the Trojan horse virus in the removable storage medium on the Internet-connected computer. Documents with characteristics, copy the relevant retrieval results to the mobile storage medium without the user's knowledge, and send them to illegal users on the Internet the next time they access the Internet, thereby realizing the theft of document data. At present, there are mainly two data interaction methods for this kind of attack, protocol isolation and logic isolation. Protocol isolation is to realize the read-only or write-only function of mobile storage media through software programming in the embedded system, and logic isolation is The method of use g...

AI Technical Summary

Problems solved by technology

At present, there are mainly two data interaction methods for this kind of attack, protocol isolation and logic isolation. Protocol isolation is to realize the read-only or write-only function of mobile storage media through software programming in the embedded system, and logic isolation is The method of use ensures the unidirectionality of data interaction. Both methods have data interaction links, which do not achieve real physical isolation and cannot guarantee the absolute unidirectionality of data interaction.

Images