Data isolation device based on non-network mode, and method and system thereof

Abstract

The invention provides a data isolation device based on a non-network mode, and an isolation method and an isolation system thereof. The data isolation device comprises an intranet host, an extranet host, and an isolated communication module. The intranet host and the extranet host are loaded with a network protocol stack, and respectively maintain a TCP proxy client module and a TCP proxy server module. A TCP connection socket1 is established and data forwarding is carried out between the TCP proxy server module and a service data packet client. A TCP connection socket2 is established and data forwarding is carried out between the TCP proxy client module and a service data packet server. The isolated communication module uses a proprietary protocol. The TCP header and following message headers of a service data packet are removed. Only pure service data load forwarding is carried out. Four-layer isolated subsystem communication between inner-end and outer-end hosts is realized on the whole, all network attacks except proprietary-protocol-based internal attacks are effectively prevented, and high network data exchange efficiency is ensured on the premise of physical isolation between the internal network and the external network.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a non-network-based data isolation device, a method and a system thereof. Background technique [0002] With the popularization and continuous development of computer network technology, attacks based on TCP / IP network are rampant, and network security issues are becoming more and more important. In a network application scenario with relatively high security requirements, it is usually required that the internal network is physically isolated from the external network to ensure the security of internal network information. [0003] But at the same time, under the premise of ensuring the physical isolation between the internal network and the external network, in order to make the internal network work normally, a small amount of data interaction with the external network is required. Usually, this kind of data interaction adopts offline mode, and the offline data exchan...

AI Technical Summary

Problems solved by technology

[0004] Based on this, it is necessary to address the existing problem of low efficiency of offline data exchange between internal and external networks under the premise of ensuring physical isolation between the internal network and the external network, and provide a method to ensure the physical isolation of the internal network and the external network. Non-network-based data isolation device with high network data interaction efficiency, method and system thereof

Images