Network safety isolation file transmission control method

Abstract

The invention relates to a safety isolation file transmission control method, in particular to a file transmission control method between taxation network safety isolation systems. A transmission control system comprises an external network isolation firewall, an external network control end, an external network transmitting end, an external network receiving end, an internal network transmitting end, an internal network receiving end, an internal network control end and an internal network isolation firewall. A computer system, a virtual machine system and the isolation firewalls are combined to achieved a relatively universal safety data transmission manner, safe and reliable bidirectional data transmission is achieved by the control method with a special safety protocol, confidentiality, completeness and non-repudiation during information transmission are achieved by safety techniques such as data encryption, digital signatures and information authentication codes, data exchanging performance is increased while safety of internal and external network systems is guaranteed, and the whole system can work reliably and stably.

Description

technical field [0001] The invention relates to a network security isolation control method, in particular to a file transmission control method between taxation network security isolation systems. It is suitable for transferring data between networks with different confidentiality levels, and realizes the efficient transmission of files between different networks while ensuring network security. Background technique [0002] The concept of isolation was created in order to protect a high-level security network environment, during which it experienced five generations of isolation technology changes. The first generation of isolation technology - complete isolation: This method makes the network in an information island state, achieving complete physical isolation, requiring at least two sets of networks and systems, and more importantly, the inconvenience of information exchange and the increase in cost. Maintenance and use have brought great inconvenience. The second gen...

AI Technical Summary

Problems solved by technology

However, some of these isolation products still require network cabling to be a dual-network cable structure, and the product has a relatively large security risk.

The third generation of isolation technology - data broadcast isolation: use the method of time-sharing copying files by the broadcast system to achieve isolation, the switching time is very long, and even needs to be done manually, which not only significantly slows down the access speed, but also does not support common network applications , lost the meaning of network existence

The fourth generation of isolation technology - air switch isolation: it uses single-pole double-throw switches to enable internal and external networks to access temporary buffers in time to complete data exchange, but there are many problems in terms of safety and performance

[0005] (2) In the case of network isolation to transmit data, the high-density network and the low-density network have at the same time, and only one can establish a dedicated protocol connection with the isolated device to achieve the purpose of data transmission, which does not guarantee the transmission from the low-density network The data of the high-density network will not cause the high-density system to be paralyzed or destroyed, so the security of the high-density system is also an urgent problem to be solved

Images